sigh, the ldap module does not work in a way that covers the add certificate and
create organisational units use cases.