Ошибка SQUID(kerberos) + AD

2020/03/02 12:54:11 kid1| Error negotiating SSL connection on FD 328: error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown (1/0)
2020/03/02 12:54:45 kid1| Error negotiating SSL connection on FD 313: error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown (1/0)
support_resolv.cc(201): pid=8533 :2020/03/02 12:55:07| kerberos_ldap_group: ERROR: Error while resolving ip address with getnameinfo: Temporary failure in name resolution
support_sasl.cc(276): pid=8533 :2020/03/02 12:55:07| kerberos_ldap_group: ERROR: ldap_sasl_interactive_bind_s error: Can't contact LDAP server
support_ldap.cc(957): pid=8533 :2020/03/02 12:55:07| kerberos_ldap_group: ERROR: Error while binding to ldap server with SASL/GSSAPI: Can't contact LDAP server
support_resolv.cc(289): pid=8533 :2020/03/02 12:55:56| kerberos_ldap_group: ERROR: Error while resolving service record _ldap._tcp.ZARYA.INT with res_search
support_resolv.cc(77): pid=8533 :2020/03/02 12:55:56| kerberos_ldap_group: ERROR: res_search: No response for SRV query
2020/03/02 12:56:07 kid1| Error negotiating SSL connection on FD 372: error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown (1/0)
2020/03/02 12:56:16 kid1| Error negotiating SSL connection on FD 122: error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown (1/0)
2020/03/02 12:56:29| Error sending to ICMP packet to 64.233.161.198. ERR: (1) Operation not permitted

Mar 02 13:00:16 proxy (ext_kerberos_ldap_group_acl)[8533]: GSSAPI client step 1
Mar 02 13:00:17 proxy (ext_kerberos_ldap_group_acl)[8533]: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Server not found in Kerberos database)
Mar 02 13:00:17 proxy (ext_kerberos_ldap_group_acl)[8533]: GSSAPI client step 1