[SSSD] [sssd PR#5279][-Accepted] man: clarify AD certificate rule