Reference

pki---dn(1) on Linux

The text 90213f2d6644, as Debian 11 (Bullseye) shipped it.

Extract the subject DN of an X.509 certificate

Flags it lists

pki---dn(1) on Linux now