The text 0bb6c665a5fc, as Debian 11 (Bullseye) shipped it.
SSSD Certificate Matching and Mapping Rules
sss-certmap(5) on Linux now