Hm yeah possibly. Reading the man page it makes it sound like you run either openssl x509 -hash or openssl crl -hash, but presumably openssl rehash figures that out for you