Command

:w !sudo tee %

openssl x509 -noout -text -in ca.crt

openssl verify -CAfiile ca.pem client.pem

diff -eq < (openssl x509 -pubkey -noout -in cert.crt) < (openssl rsa -pubout -in cert.key)