Missing CA certificate while setting up replication agreement between IPA server and Active Directory, causes error "Peer's Certificate issuer is not recognized"

Issue

• The issue occurs when the Active Directory server is using a certificate issued by an external Certificate Authority or when self-signed certificates are not used.
• Errors:
  Replication bind with SIMPLE auth failed: LDAP error -11 (Connect error) (TLS error -8179:Peer's Certificate issuer is not recognized.
  Error: could not send startTLS request: error -11 (Connect error)