When you configure xpack.ssl.certificate_authorities that takes precedence over the CA certs that exist in your JVM, so the ldap cert you added to your java cacerts isn't used.
Yogesh's link shows how to configure a certificate authority specifically for the LDAP connection.