rfc2253_name
ret = rfc2253_name(X509_get_subject_name(cert), &md->subject_dn);
ret = rfc2253_name(X509_get_issuer_name(cert), &md->issuer_dn);