It doesn't look like compiling a filter using extensibleMatch is working. For example: (UserAccountControl:1.2.840.113556.1.4.803:=2)