[SSSD] [sssd PR#5279][+Accepted] man: clarify AD certificate rule