Hello! I'm creating a small PKI following the guide here: https://jamielinux.com/docs/openssl-certificate-authority The intermediate CA cert is created with: If I then dump the cert, I see that subject line is I then create the CRL using: When I dump the CRL, though, the issuer is When I put my certificate through https://certificate.revocationcheck.com/, it complains that the CRL issuer and intermediate CA subject don't match byte for byte. Is there a way to have both generated with the same formatting? I looked through my configuration files and couldn't find anything that would explain the difference. I think it works anyways, but it would be nice to have them match... Best regards, Aram |