       The comparison is done with the <code class="literal">DN</code> in
       <a class="ulink" href="https://datatracker.ietf.org/doc/html/rfc2253" target="_top">RFC 2253</a>
       format. To see the <code class="literal">DN</code> of a client certificate
       in this format, do
</p><pre class="programlisting">
openssl x509 -in myclient.crt -noout -subject -nameopt RFC2253 | sed "s/^subject=//"
</pre><p>
        Care needs to be taken when using this option, especially when using
        regular expre