...
Add the objectSID attribute to the certificate template. For more information, see https://doc.nexusgroup.com/display/PUB/Set + up + certificate + template + in + Identity + Manager.
Verify the SID in the 1.3.6.1.4.1.311.25.2 attribute of the issued certificate.
For more information, see Nexus awareness advisory on Microsoft’s update KB5014754.