Using getssl to grab Let's Encrypt certs.
configuration file routines:DEF_LOAD_BIO:missing equal sign:/usr/src/crypto/openssl/crypto/conf/conf_def.c:351:line 354
... can be caused by putting newlines into your SANS tag.
#wrong
SANS="www.foo.com, www.bar.com,
www.baz.com"
#correct
SANS="www.foo.com, www.bar.com, www.baz.com"
Comes of having one cert for 5 dozen plus domains .... 🙄