单项选择题

A. Use the "is exactly" or "contains" operators.
B. Create a user filter matching the dn of the certificate.
C. Verify that the certificate is issued by a publicly trusted cs.
D. Match the certificate type and value with an attribute from the ldap server.