The cn=config is visible from the admin port (default 4444), not from the regular ldap port (1389 in your case).
Try the same search (over SSL) to the admin port as directory admin. You will get the config
Thanks, this works. However, cn=config was available within openDS via non-secure port. Any reason?
./ldapsearch -h localhost -p 4444 --useSSL --trustAll -D "cn=Directory Manager" -w <password> -b cn=config objectclass=* dn