pub fn debug_dn_pairs(dn: &[u8]) -> String
Debug helper: format a DN as a string of “OID=value” pairs.