Debian style cn=config