[SSSD] [sssd PR#814][synchronized] certmap: allow missing KU in OpenSSL version