without typ= part result as below mithat at adige:~$ openconnect -c 'pkcs11:model=AKIS%20V1.2%00%00%00%00%00%00%00;manufacturer=TUBITAK-UEKAE%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00;serial=0036218D34081A32;token=Akis%00A%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff;id=%fd%90%0c%3b%c4%20%b0%b4%39%f7%1e%fa%02%ef%df%45%50%91%8f%c4;object=62917107586SIGN0' XYZ.XYZ.XYZ.XYZ POST https://XYZ.XYZ.XYZ.XYZ/ Attempting to connect to server XYZ.XYZ.XYZ.XYZ:443 PIN required for Akis Enter PIN: Error loading certificate from PKCS#11: The requested data were not available. Loading certificate failed. Aborting. Failed to open HTTPS connection to XYZ.XYZ.XYZ.XYZ Failed to obtain WebVPN cookie mithat at adige:~$ openconnect -c 'pkcs11:serial=0036218D34081A32;object=62917107586SIGN0' XYZ.XYZ.XYZ.XYZPOST https://XYZ.XYZ.XYZ.XYZ/ Attempting to connect to server XYZ.XYZ.XYZ.XYZ:443 PIN required for Akis Enter PIN: Error loading certificate from PKCS#11: The requested data were not available. Loading certificate failed. Aborting. Failed to open HTTPS connection to XYZ.XYZ.XYZ.XYZ Failed to obtain WebVPN cookie Do I need specify 'type=private' to say 'use my private cert for user cert'?