#!/bin/sh pki cert-show 0x1 --output tmp/ca_signing.crt