code: public static final String getOpensslSubjectString(X500Principal principal) {
  
      String rfcReadableString = X500NameUtils.getReadableForm(principal);
      return OpensslNameUtils.convertFromRfc2253(rfcReadableString, false);
    }
docs: Formats principal in the ugly, extremely non-standard and widely hated
  OpenSSL, slash-separated format (which everyone on the Grid uses, btw...).
  
  @param principal
  the principal for which the DN should be serialized
  @return a string representing the principal in the terrible OpenSSL
  slash-separated format