{ "mode": "man", "parameter": "OPENSSL-NAMEDISPLAY-OPTIONS", "section": "1SSL", "url": "https://www.chedong.com/phpMan.php/man/OPENSSL-NAMEDISPLAY-OPTIONS/1SSL/json", "generated": "2026-06-16T06:22:10Z", "synopsis": "openssl command [ options ... ] [ parameters ... ]", "sections": { "NAME": { "content": "openssl-namedisplay-options - Distinguished name display options\n", "subsections": [] }, "SYNOPSIS": { "content": "openssl command [ options ... ] [ parameters ... ]\n", "subsections": [] }, "DESCRIPTION": { "content": "OpenSSL provides fine-grain control over how the subject and issuer DN's are displayed. This\nis specified by using the -nameopt option, which takes a comma-separated list of options from\nthe following set. An option may be preceded by a minus sign, \"-\", to turn it off. The\ndefault value is \"oneline\". The first four are the most commonly used.\n", "subsections": [] }, "OPTIONS": { "content": "", "subsections": [ { "name": "Name Format Option Arguments", "content": "The DN output format can be fine tuned with the following flags.\n" }, { "name": "compat", "content": "Display the name using an old format from previous OpenSSL versions.\n\nRFC2253\nDisplay the name using the format defined in RFC 2253. It is equivalent to esc2253,\nescctrl, escmsb, utf8, dumpnostr, dumpunknown, dumpder, sepcommaplus, dnrev and\nsname.\n" }, { "name": "oneline", "content": "Display the name in one line, using a format that is more readable RFC 2253. It is\nequivalent to esc2253, escctrl, escmsb, utf8, dumpnostr, dumpder, usequote,\nsepcommaplusspace, spaceeq and sname options.\n" }, { "name": "multiline", "content": "Display the name using multiple lines. It is equivalent to escctrl, escmsb,\nsepmultiline, spaceeq, lname and align.\n\nesc2253\nEscape the \"special\" characters in a field, as required by RFC 2253. That is, any of the\ncharacters \",+\"<>;\", \"#\" at the beginning of a string and leading or trailing spaces.\n\nesc2254\nEscape the \"special\" characters in a field as required by RFC 2254 in a field. That is,\nthe NUL character and of \"()*\".\n\nescctrl\nEscape non-printable ASCII characters, codes less than 0x20 (space) or greater than 0x7F\n(DELETE). They are displayed using RFC 2253 \"\\XX\" notation where XX are the two hex\ndigits representing the character value.\n\nescmsb\nEscape any characters with the most significant bit set, that is with values larger than\n127, as described in escctrl.\n\nusequote\nEscapes some characters by surrounding the entire string with quotation marks, \"\"\".\nWithout this option, individual special characters are preceded with a backslash\ncharacter, \"\\\".\n" }, { "name": "utf8", "content": "Convert all strings to UTF-8 format first as required by RFC 2253. If the output device\nis UTF-8 compatible, then using this option (and not setting escmsb) may give the\ncorrect display of multibyte characters. If this option is not set, then multibyte\ncharacters larger than 0xFF will be output as \"\\UXXXX\" for 16 bits or \"\\WXXXXXXXX\" for 32\nbits. In addition, any UTF8Strings will be converted to their character form first.\n\nignoretype\nThis option does not attempt to interpret multibyte characters in any way. That is, the\ncontent octets are merely dumped as though one octet represents each character. This is\nuseful for diagnostic purposes but will result in rather odd looking output.\n\nshowtype\nDisplay the type of the ASN1 character string before the value, such as \"BMPSTRING: Hello\nWorld\".\n\ndumpder\nAny fields that would be output in hex format are displayed using the DER encoding of the\nfield. If not set, just the content octets are displayed. Either way, the #XXXX...\nformat of RFC 2253 is used.\n\ndumpnostr\nDump non-character strings, such as ASN.1 OCTET STRING. If this option is not set, then\nnon character string types will be displayed as though each content octet represents a\nsingle character.\n\ndumpall\nDump all fields. When this used with dumpder, this allows the DER encoding of the\nstructure to be unambiguously determined.\n\ndumpunknown\nDump any field whose OID is not recognised by OpenSSL.\n\nsepcommaplus, sepcommaplusspace, sepsemiplusspace, sepmultiline\nSpecify the field separators. The first word is used between the Relative Distinguished\nNames (RDNs) and the second is between multiple Attribute Value Assertions (AVAs).\nMultiple AVAs are very rare and their use is discouraged. The options ending in \"space\"\nadditionally place a space after the separator to make it more readable. The\nsepmultiline starts each field on its own line, and uses \"plus space\" for the AVA\nseparator. It also indents the fields by four characters. The default value is\nsepcommaplusspace.\n\ndnrev\nReverse the fields of the DN as required by RFC 2253. This also reverses the order of\nmultiple AVAs in a field, but this is permissible as there is no ordering on values.\n\nnofname, sname, lname, oid\nSpecify how the field name is displayed. nofname does not display the field at all.\nsname uses the \"short name\" form (CN for commonName for example). lname uses the long\nform. oid represents the OID in numerical form and is useful for diagnostic purpose.\n" }, { "name": "align", "content": "Align field values for a more readable output. Only usable with sepmultiline.\n\nspaceeq\nPlaces spaces round the equal sign, \"=\", character which follows the field name.\n" } ] }, "COPYRIGHT": { "content": "Copyright 2000-2020 The OpenSSL Project Authors. All Rights Reserved.\n\nLicensed under the Apache License 2.0 (the \"License\"). You may not use this file except in\ncompliance with the License. You can obtain a copy in the file LICENSE in the source\ndistribution or at .\n\n\n\n3.0.2 2026-06-02 OPENSSL-NAMEDISPLAY-OPTIONS(1SSL)", "subsections": [] } }, "summary": "openssl-namedisplay-options - Distinguished name display options", "flags": [], "examples": [], "see_also": [] }