Use the powershell command described in the Azure documentation. Azure Secure LDAP requires the certificate to have extended key usage. Other tools such as OpenSSL cannot create a compatible certificate.