HI! It's confusing that OpenSSL seems to output distinguished names in different string representations.
While one can use command-line argument -nameopt to influence the output of openssl x509 -issuer -subject this does not affect DN output of X.509v3 extensions and there's no such argument for openssl verify. Would it be much work to unify the string output of DNs? Ciao, Michael. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org