LDIF, userCertificate; and missing "binary" option