support CLIENT_SSL_CERT_LDAP
made email:format optional