pkits.ldif and openldap

[Norbert Veber <nveber@certicom.com>]

Hello,

I am trying to insert the test certificates from
http://csrc.nist.gov/pki/testing/PKITS_data.zip into an openldap
database.  I am using the following configuration in slapd.conf:

database ldbm
suffix          "O=Test Certificates,C=US"
rootdn          "cn=Manager,dc=ahmes,dc=certicom,dc=com"
directory       /usr/local/var/openldap-data/pkits

When I try to add the entries via ldapadd, I get this:

$ ldapadd -x -D "cn=Manager,dc=ahmes,dc=certicom,dc=com" -W -f pkits.ldif 
Enter LDAP Password: 
adding new entry "O=Test Certificates,C=US"

adding new entry "CN=Trust Anchor,O=Test Certificates,C=US"

ldapadd: invalid format (line 5) entry: "CN=Good CA,O=Test
Certificates,C=US"

I am baffled by this.  First of all, line 5 in pkits.ldif looks like
this:
dn: CN=Trust Anchor,O=Test Certificates,C=US

The "Good CA" entry is actually on line 109.  Looking at the actual
entries, I see nothing wrong with either of them.

Any ideas?  I am using openldap-2.1.22.

Thanks,

Norbert