I am reasonably sure which the confirm command is Functioning as it is speculated to, and openssl is appropriately asserting that the certs Really don't match up in some way. But I haven't got adequate information and facts to mention why the final hyperlink is problematic., as described in RFC 2469. Canonical kind is normally chosen, and employed