Jason,
Yes, bad search filter there - apologies.
This one is better:
# ldapsearch -xLLL -D "cn=Directory Manager" -W -b
ou=certificateprofiles,ou=ca,o=ipaca
'(&(nsds5ReplConflict=*)(objectclass=ldapsubentry))'
The base DN you want to specify is 'ou=certificateprofiles,ou=ca,o=ipaca'. This is
the area from which the profile monitor thread obtains data.