check openssl.x509_req