BASE          dc=example, dc=com
URI           ldaps://ldap1.example.com/

TLS_CACERT    /etc/openldap/ssl/example-ldap-cacert.pem
TLS_REQCERT   demand