Would you have accepted a python solution? I typically don't do this type of stuff using raw openssl on the rare occasion I need it.