Como extrair common name de um certificado P12?

CERTIFICATE_CN="$(openssl pkcs12 -info -in your_pkcs12_file.p12 -passin 'pass:' -passout 'pass:' | grep friendly | head -1)" &&
echo $CERTIFICATE_CN
# O output:
friendlyName: your_common_name