[SSSD] [sssd PR#814][closed] certmap: allow missing KU in OpenSSL version