jdobiash thanks for your comment.
For my understanding, CBT is implemented as part of Windows EPA and as long as you're using Windows authentication providers (and EPA is enabled) it will kind of be automatically sent for you (feel free to correct me if I'm wrong)
In my case, I have an application that is written in Java and is authenticating against an LDAP server (mostly Microsoft but not only) using a Simple Bind.
So I guess the part I'm missing is - should I create the CBT (maybe it's part of the JAVA class I'm using and maybe not) or Windows will automatically create it for me?
If it's my responsibility, can you refer me to more information on how to create the CBT and bind it to the TLS connection? Example doesn't have to be in Java, it could be anything just to get me some information to start with.