OS X client gets SSL certificate error when trying to join OD
The OD server on 10.10 uses the identity certificate pointed to by the "MACHINE_IDENTITY" identity preference. Using Keychain Access or the security command line tool change the identity preference to point to your new CA signed cert.