Como extrair common name de um certificado P12?

CERTIFICATE_CN="$(openssl pkcs12 -info -in your_pkcs12_file.p12 -passin 'pass:' -passout 'pass:' | grep friendly | head -1)" &&echo $CERTIFICATE_CN# O output:friendlyName: your_common_name