The text f7e0acdcae3f, as Debian 13 (Trixie) shipped it.
SSSD Certificate Matching and Mapping Rules
sss-certmap(5) on Linux now