There is no way to provide a empty base string to tl-ldap-certalias that will make ldap iterator to search on default base.