The text 528d435ecb29, as Debian 12 (Bookworm) shipped it.
extract Distinguished Name from a PEM certificate
virt-pki-query-dn(1) on Linux now
