The Extended Operation is a generic LDAP operation that can define new operations that were not part of the original protocol specification.
It should be noted that some "LDAPS" client libraries only encrypt communication; they do not check the host name against the name in the supplied certificate [REF].