get_x509_dn
rv = get_x509_dn(X509_get_issuer_name(xcert), &certIssuerDN);
rv = get_x509_dn(X509_get_subject_name(xcert), &certSubjectDN);