[SSSD] [sssd PR#5279][-Waiting for review] man: clarify AD certificate rule