Not really an answer here, just an observation. I tested the filter "(objectclass=cRLDistributionPoint)" on a Net::LDAP based search program I wrote for $work and it returns one object. That makes me think it may not be simply an issue with Net::LDAP.