[SSSD] [sssd PR#814][+Pushed] certmap: allow missing KU in OpenSSL version