Unregistered, but 636 plus a 50000 offset — the TLS half of an unprivileged LDAP pair.
50636 has no IANA assignment because it sits in the Dynamic/Private range. The number mirrors LDAPS on 636 shifted by 50000, the same offset pattern that puts plain LDAP on 50389. Directory servers are routinely moved to unprivileged ports this way so they can run without root. Finding 50636 open, especially next to 50389, points at a directory server on unprivileged ports, and a TLS handshake plus a root-DSE query will confirm or refute it.
Expose with care
LDAPS at least encrypts the bind, but a directory service is still an identity store; expose it only to the systems that must authenticate against it.
$ openssl s_client -connect TARGET:50636 -servername TARGET </dev/nullSeen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.