On Tue, Sep 05, 2017 at 02:08:38PM +0100, Ian Jackson wrote: > > FYI, Enrico, the openssl CLI tool can dump this kind of thing so you > can compare before and after. I forget the exact runes I'm afraid. openssl x509 -in <<file>> -noout -text is probably the magic line you're looking for.