diff --git a/servers/slapd/value.c b/servers/slapd/value.c
index 3d4e05acd6..0508b3590d 100644
--- a/servers/slapd/value.c
+++ b/servers/slapd/value.c
@@ -87,6 +87,7 @@ value_normalize(
 	}
 
 	/* we only support equality matching of binary attributes */
+	/* This is suspect, flexible certificate matching will hit this */
 	if( slap_ad_is_binary( ad ) && usage != SLAP_MR_EQUALITY ) {
 		*text = "inappropriate binary matching";
 		return LDAP_INAPPROPRIATE_MATCHING;