Danny Tsai
says to
YSITD
你ldif file裡一定要先add key -> add cert -> add ca