Better type for x509 -checkend argument