[SSSD] [sssd PR#5279][-Ready to push] man: clarify AD certificate rule