openssl x509 -in cert.pem -text -noout