Using openssl -subj to define Subject and dnQualifier on CLI
(no dn_req on openssl config, minimal version)