diff --git a/servers/slapd/back-ldap/config.c b/servers/slapd/back-ldap/config.c
index 9ea98fb72f..5e0763bce7 100644
--- a/servers/slapd/back-ldap/config.c
+++ b/servers/slapd/back-ldap/config.c
@@ -1396,7 +1396,7 @@ done_url:;
 		}
 		li->li_flags &= ~LDAP_BACK_F_TLS_MASK;
 		li->li_flags |= tls_mode[i].mask;
-		if ( c->argc > 3 ) {
+		if ( c->argc > 2 ) {
 			for ( i=2; i<c->argc; i++ ) {
 				if ( bindconf_tls_parse( c->argv[i], &li->li_tls ))
 					return 1;