Remove unrequired certificate hashes. Expand SSL options for openldap clients and update the client ldap configuration file.