You can retrieve the SSL CA certificate from for example LDAP or IMAP servers.

echo -n | openssl s_client -connect <server>:636 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ldapserver.pem