To target extended operations, use the extop keyword and provide the operation OID. The extop keyword uses the following syntax:
You can target multiple extended operations by using the extop keyword with the following syntax:
(extop = "oid1 || oid2 ... || oidN")
(extop != "oid1 || oid2 ... || oidN")
(extop = "220.127.116.11.4.1.1466.20037 || 18.104.22.168.4.1.422.214.171.124.")
Note - Access control using the extop keyword with a StartTLS extended operation target must always be done using Global ACIs. The authorization entry in the StartTLS extended operation is null.