We have done that : directory.globlalsign.net. Openldap seems to work great, but Netscape users have problems to find MIE/OL certificates. I think it is a BMPstring problem. Should be corrected soon in our certificates. If you find something wrong in the way we put certificates in ldap, do not hesitate to contact me. Marc