> How do I teach OpenSSL the format of the value for a custom extension > without writing code? You can't. The closest you can do is encode a binary string into the config file. But something has to write that string :)