Reference

pki---dn(1) on Linux

The text 51e25c9c35b9, as Debian 12 (Bookworm) shipped it.

Extract the subject DN of an X.509 certificate

Flags it lists

pki---dn(1) on Linux now