gjs68

also check in openssl.cnf what the default max setting is, (ran into a Country > 2 characters requirement issue, producing a similar error)