#!/bin/sh pki cert-show 0x1 --output tmp/external.crt #openssl crl2pkcs7 -nocrl -certfile tmp/external.crt -out tmp/cert_chain.p7b ./ca_signing-ca-sign.sh