ERR_remove_state() is deprecated since OpenSSL 1.0.0 Use X509_NAME_ENTRY_get_object() instead of direct access.