URL: https://github.com/SSSD/sssd/pull/814 Title: #814: certmap: allow missing KU in OpenSSL version
jhrozek commented: """ btw please let me know if you want the patches backported to sssd-1-16 as well (or just push them yourself :-)) """
See the full comment at https://github.com/SSSD/sssd/pull/814#issuecomment-496696347