The text 95835dde7c89, as Debian 10 (Buster) shipped it.
SSSD Certificate Matching and Mapping Rules
sss-certmap(5) on Linux now
