The custom AD Authenticator abruptly stops working one day, when no major system changes have taken place. Users who attempt to login receive a message about incorrect username/password, although authentication worked fine the previous day
If you see the message "This server could not prove that it is (servername); its security certificate expired yesterday." Then update the security certificate on this server. Then retry authentication, and it should be successful.