Hello,
No tlsVerifyMode=None should be enough.
Could you show me your SOGoUserSources block in your sogo.conf ? (mind the password in it)

Could you also add LDAPDebugEnabled = YES; and try (without your cert ibeing trusted) and show me the log ?

SOGoUserSources = (
{
type = ldap;
CNFieldName = displayName;
UIDFieldName = cn;
IDFieldName = cn; // first field of the DN for direct binds
bindFields = (cn, mail); // array of fields to use for indirect binds
baseDN = "dc=company,dc=com";
bindDN = "cn=sogo,ou=systemaccounts,dc=company,dc=com";
bindPassword = "REDACTED;
canAuthenticate = YES;
displayName = "Address Book";
hostname = ldaps://hostname.com:636?tlsVerifyMode=None;
/ hostname = ldap://hostname.com:389; /
id = company;
isAddressBook = YES;
},

I was seeing the following error:

2026-10-14 20:00:02.601 sogod[217599:217599] File NSDictionary.m: 671. In -[NSDictionary initWithContentsOfFile:] Contents of file '/etc/sogo/sogo.conf' does not contain a dictionary
<0x0x55fed9b723f0[SOGoStartupLogger]> Cannot read configuration from '/etc/sogo/sogo.conf'. Aborting

The only change besides a working config and this is adding "?tlsVerifyMode=None"

The above post filtered out the asterisks but the second hostname in the block is commented out

Adding quotes seems to fix it so guessing it didn't like the special characters without quotes.

hostname = "ldaps://hostname.com:636?tlsVerifyMode=None";