openssl x509 -noout -text < cert.pem