This is the large CA-bundle.crt file that when configured as the certificate bundle for the LDAP server, causes ldap-utils to fail with tls_read want/got mismatches early in the negotiation
https://csde.washington.edu/~mbw/hide/ca-bundle.crt I'll leave this link up for at least 1 year Matt