So I changed up the order I was planning.

I have added the second server that is using ldap and has ssl enabled
for client / server connections. Currently no one is connecting to
this server, but they will be moved to it after I upgrade.

So, my *new* question is, could I upgrade this new server to v3 first,
leaving my current server at v2.2.2 to do off hours some time?