OpenSSL tricks: x509 pkcs12 verify output