The text ae989a47f6ae, as Debian 12 (Bookworm) shipped it.
SSSD Certificate Matching and Mapping Rules
sss-certmap(5) on Linux now
