convert comma-separated RDNs into slash-separated OpenSSL --subject format