openssl x509 -sha2 -in apache.crt -fingerprint -noout