(List
  (FunctionDef try []
    (List
      (Com {[LIT_CHARS echo]} {[DQ [VarSub @]]})
      (AndOr OP_OR_IF
        (Com {[DQ [VarSub @]]})
        (Com {[LIT_CHARS exit]} {[LIT_CHARS 1]})
      )
    )
  )
  (Com {[LIT_CHARS try]} {[LIT_CHARS rm]} {[LIT_CHARS -rf]} {[LIT_CHARS out]})
  (Com {[LIT_CHARS try]} {[LIT_CHARS mkdir]} {[LIT_CHARS out]})
  (Com {[LIT_CHARS try]} {[LIT_CHARS /bin/sh]} {[LIT_CHARS -c]} {[DQ [LIT_CHARS "echo 01 > out/aia-test-root-serial"]]})
  (Com {[LIT_CHARS try]} {[LIT_CHARS /bin/sh]} {[LIT_CHARS -c]} {[DQ [LIT_CHARS "echo 01 > out/aia-test-intermediate-serial"]]})
  (Com {[LIT_CHARS touch]} {[LIT_CHARS out/aia-test-root-index.txt]})
  (Com {[LIT_CHARS touch]} {[LIT_CHARS out/aia-test-intermediate-index.txt]})
  (Com {[LIT_CHARS try]} {[LIT_CHARS openssl]} {[LIT_CHARS genrsa]} {[LIT_CHARS -out]} {[LIT_CHARS out/aia-test-root.key]} {[LIT_CHARS 2048]})
  (Com {[LIT_CHARS try]} {[LIT_CHARS openssl]} {[LIT_CHARS genrsa]} {[LIT_CHARS -out]} {[LIT_CHARS out/aia-test-intermediate.key]} {[LIT_CHARS 2048]})
  (Com {[LIT_CHARS try]} {[LIT_CHARS openssl]} {[LIT_CHARS genrsa]} {[LIT_CHARS -out]} {[LIT_CHARS out/aia-test-cert.key]} {[LIT_CHARS 2048]})
  (Com {[LIT_CHARS try]} {[LIT_CHARS openssl]} {[LIT_CHARS req]} {[LIT_CHARS -new]} {[LIT_CHARS -key]} {[LIT_CHARS out/aia-test-root.key]} {[LIT_CHARS -out]} {[LIT_CHARS out/aia-test-root.csr]} {[LIT_CHARS -config]} {[LIT_CHARS aia-test.cnf]}
    more_env=[('CA_COMMON_NAME', {[DQ [LIT_CHARS "AIA Test Root CA"]]}), ('CA_DIR', {[LIT_CHARS out]}), ('CA_NAME', {[LIT_CHARS aia-test-root]})]
  )
  (Com {[LIT_CHARS try]} {[LIT_CHARS openssl]} {[LIT_CHARS x509]} {[LIT_CHARS -req]} {[LIT_CHARS -days]} {[LIT_CHARS 3650]} {[LIT_CHARS -in]} {[LIT_CHARS out/aia-test-root.csr]} {[LIT_CHARS -out]} {[LIT_CHARS out/aia-test-root.pem]} {[LIT_CHARS -signkey]} {[LIT_CHARS out/aia-test-root.key]} {[LIT_CHARS -extfile]} {[LIT_CHARS aia-test.cnf]} {[LIT_CHARS -extensions]} {[LIT_CHARS ca_cert]} {[LIT_CHARS -text]}
    more_env=[('CA_COMMON_NAME', {[DQ [LIT_CHARS "AIA Test Root CA"]]}), ('CA_DIR', {[LIT_CHARS out]}), ('CA_NAME', {[LIT_CHARS aia-test-root]})]
  )
  (Com {[LIT_CHARS try]} {[LIT_CHARS openssl]} {[LIT_CHARS req]} {[LIT_CHARS -new]} {[LIT_CHARS -key]} {[LIT_CHARS out/aia-test-intermediate.key]} {[LIT_CHARS -out]} {[LIT_CHARS out/aia-test-intermediate.csr]} {[LIT_CHARS -config]} {[LIT_CHARS aia-test.cnf]}
    more_env=[('CA_COMMON_NAME', {[DQ [LIT_CHARS "AIA Test Intermediate CA"]]}), ('CA_DIR', {[LIT_CHARS out]}), ('CA_NAME', {[LIT_CHARS aia-test-root]})]
  )
  (Com {[LIT_CHARS try]} {[LIT_CHARS openssl]} {[LIT_CHARS ca]} {[LIT_CHARS -batch]} {[LIT_CHARS -in]} {[LIT_CHARS out/aia-test-intermediate.csr]} {[LIT_CHARS -out]} {[LIT_CHARS out/aia-test-intermediate.pem]} {[LIT_CHARS -config]} {[LIT_CHARS aia-test.cnf]} {[LIT_CHARS -extensions]} {[LIT_CHARS ca_cert]}
    more_env=[('CA_COMMON_NAME', {[DQ [LIT_CHARS "AIA Test Intermediate CA"]]}), ('CA_DIR', {[LIT_CHARS out]}), ('CA_NAME', {[LIT_CHARS aia-test-root]})]
  )
  (Com {[LIT_CHARS try]} {[LIT_CHARS openssl]} {[LIT_CHARS req]} {[LIT_CHARS -new]} {[LIT_CHARS -key]} {[LIT_CHARS out/aia-test-cert.key]} {[LIT_CHARS -out]} {[LIT_CHARS out/aia-test-cert.csr]} {[LIT_CHARS -config]} {[LIT_CHARS aia-test.cnf]}
    more_env=[('CA_COMMON_NAME', {[DQ [LIT_CHARS aia-host.invalid]]}), ('CA_DIR', {[LIT_CHARS out]}), ('CA_NAME', {[LIT_CHARS aia-test-intermediate]})]
  )
  (Com {[LIT_CHARS try]} {[LIT_CHARS openssl]} {[LIT_CHARS ca]} {[LIT_CHARS -batch]} {[LIT_CHARS -in]} {[LIT_CHARS out/aia-test-cert.csr]} {[LIT_CHARS -out]} {[LIT_CHARS out/aia-test-cert.pem]} {[LIT_CHARS -config]} {[LIT_CHARS aia-test.cnf]} {[LIT_CHARS -extensions]} {[LIT_CHARS user_cert]}
    more_env=[('CA_COMMON_NAME', {[DQ [LIT_CHARS "AIA Test Intermediate CA"]]}), ('CA_DIR', {[LIT_CHARS out]}), ('CA_NAME', {[LIT_CHARS aia-test-intermediate]}), ('AIA_URL', {[LIT_CHARS http] [LIT_OTHER ":"] [LIT_CHARS //aia-test.invalid]})]
  )
  (Com {[LIT_CHARS try]} {[LIT_CHARS cp]} {[LIT_CHARS out/aia-test-cert.pem]} {[LIT_CHARS ../certificates/aia-cert.pem]})
  (Com {[LIT_CHARS try]} {[LIT_CHARS openssl]} {[LIT_CHARS x509]} {[LIT_CHARS -outform]} {[LIT_CHARS der]} {[LIT_CHARS -in]} {[LIT_CHARS out/aia-test-intermediate.pem]} {[LIT_CHARS -out]} {[LIT_CHARS ../certificates/aia-intermediate.der]})
  (Com {[LIT_CHARS try]} {[LIT_CHARS cp]} {[LIT_CHARS out/aia-test-root.pem]} {[LIT_CHARS ../certificates/aia-root.pem]})
)