Here, all dnQualifier has been already set on OpenSSL config No need openssl -subj Original dnQualifier is for assets/Certificates/samples/dcpinside/