$ ldapsearch \
    -x \
    -D "cn=Directory Manager" \
    -w Secret.123 \
    -b "o=ipaca" \
    -LLL \
    -o ldif_wrap=no \
    > ca.ldif

$ sed \
    -i \
    -e 's/o=ipaca/dc=ca,dc=pki,dc=example,dc=com/' \
    -e 's/^objectClass: organization$/objectClass: domain/' \
    -e 's/^o: ipaca$/dc: ca/' \
    ca.ldif

$ ldapadd \
    -x \
    -D "cn=Directory Manager" \
    -w Secret.123 \
    -f ca.ldif