better openssl command