(ITS#7460) command-line option to ldapsearch to ignore server SSL certificate