^xo for openssl x509...