https://bugs.openldap.org/show_bug.cgi?id=9654
--- Comment #2 from Howard Chu hyc@openldap.org --- (In reply to Howard Chu from comment #1)
You're welcome to submit a patch implementing this.
Though I question it's usefulness here. Again, LDAP servers don't tend to serve a wide variety of clients in multiple security domains. They tend to live in one security domain with only one overriding certificate authority and only one certificate technology.