Client raised fatal(2) certificate_unknown(46) alert: Failed to read record org.bouncycastle.tls.TlsFatalAlert: certificate_unknown(46) with
Caused by: java.security.cert.CertificateException: No subject alternative name found matching IP address <ldaps server IP>
Management Center version 3.3.1.1 (and above) started verifying the certificate's Common Name or SAN of LDAP that it matches Management Center LDAP URL setting.
A none match would throw a Fatal Alert with certificate_unknown(46) reason.
For example:
Solution is to change the LDAP URL settings to ldaps://ldaps.lcp.lab:636