Added a comment pointing out the behaviour of "openssl x509 -conf ...",