diff --git a/internal/outpost/ldap/ldap_tls.go b/internal/outpost/ldap/ldap_tls.go
index e14e7cb01..67b464645 100644
--- a/internal/outpost/ldap/ldap_tls.go
+++ b/internal/outpost/ldap/ldap_tls.go
@@ -24,7 +24,7 @@ func (ls *LDAPServer) getCertificates(info *tls.ClientHelloInfo) (*tls.Certifica
 			}
 			return provider.cert, nil
 		}
-		if provider.certUUID != ls.providers[0].certUUID && provider.cert != nil {
+		if provider.certUUID != ls.providers[0].certUUID || provider.cert == nil {
 			allIdenticalCerts = false
 		}
 	}