It appears the confguration.py for SA-ldapsearch is referencing the deprecated caPath and caCertFile configurations from server.conf
ca_path = os.path.expandvars(get_ssl_configuration_setting('caPath', ca_cert_file = get_ssl_configuration_setting('caCertFile', default='')
I've asked support whether that will be updated and if the workaround is to configure the caPath and caCertFile settings.