Reference

pki---dn(1) on Linux

The text aa0a7ffe7702, as Debian 13 (Trixie) shipped it.

Extract the subject DN of an X.509 certificate

Flags it lists

pki---dn(1) on Linux now