o 600s, some servers don't follow rfc recommendations
1 2
#! /bin/sh exec ./x509_name_match ${TEST_VERBOSE:+-v}