OPT_PARAM
{ "cert...", OPT_PARAM, '.',
OPENSSL_assert(o->retval == OPT_PARAM);
OPENSSL_assert(o->retval == OPT_DUP || o->retval > OPT_PARAM);