openssl x509 -in ca.crt -noout -subject