Reference

pki---dn(1) on Linux

The text 306f60a0c241, as Debian 10 (Buster) shipped it.

Extract the subject DN of an X.509 certificate

Flags it lists

pki---dn(1) on Linux now