logwrite = SA <${certextract {signature_algorithm}{$tls_out_peercert}}>
logwrite = SG <${certextract {signature} {$tls_out_peercert}}>
logwrite = ${certextract {subject_altname}{$tls_out_peercert}{SAN <$value>}{(no SAN)}}
logwrite = SA <${certextract {signature_algorithm}{$tls_out_peercert}}>
logwrite = SG <${certextract {signature} {$tls_out_peercert}}>
logwrite = ${certextract {subject_altname}{$tls_out_peercert}{SAN <$value>}{(no SAN)}}