(List
  (FunctionDef try []
    (List
      (Com {[LIT_CHARS echo]} {[DQ [VarSub @]]})
      (AndOr OP_OR_IF
        (Com {[DQ [VarSub @]]})
        (Com {[LIT_CHARS exit]} {[LIT_CHARS 1]})
      )
    )
  )
  (Com {[LIT_CHARS try]} {[LIT_CHARS rm]} {[LIT_CHARS -rf]} {[LIT_CHARS out]})
  (Com {[LIT_CHARS try]} {[LIT_CHARS mkdir]} {[LIT_CHARS out]})
  (Com {[LIT_CHARS try]} {[LIT_CHARS /bin/sh]} {[LIT_CHARS -c]} {[DQ [LIT_CHARS "echo 01 > out/2048-sha1-root-serial"]]})
  (Com {[LIT_CHARS try]} {[LIT_CHARS /bin/sh]} {[LIT_CHARS -c]} {[DQ [LIT_CHARS "echo 02 > out/2048-md5-root-serial"]]})
  (Com {[LIT_CHARS touch]} {[LIT_CHARS out/2048-sha1-root-index.txt]})
  (Com {[LIT_CHARS touch]} {[LIT_CHARS out/2048-md5-root-index.txt]})
  (Com {[LIT_CHARS try]} {[LIT_CHARS openssl]} {[LIT_CHARS genrsa]} {[LIT_CHARS -out]} {[LIT_CHARS out/2048-sha1-root.key]} {[LIT_CHARS 2048]})
  (Com {[LIT_CHARS try]} {[LIT_CHARS openssl]} {[LIT_CHARS req]} {[LIT_CHARS -new]} {[LIT_CHARS -key]} {[LIT_CHARS out/2048-sha1-root.key]} {[LIT_CHARS -out]} {[LIT_CHARS out/2048-sha1-root.req]} {[LIT_CHARS -config]} {[LIT_CHARS ca.cnf]}
    more_env=[('CA_COMMON_NAME', {[DQ [LIT_CHARS "Test Dup-Hash Root CA"]]})]
  )
  (Com {[LIT_CHARS try]} {[LIT_CHARS openssl]} {[LIT_CHARS x509]} {[LIT_CHARS -req]} {[LIT_CHARS -days]} {[LIT_CHARS 3650]} {[LIT_CHARS -sha1]} {[LIT_CHARS -in]} {[LIT_CHARS out/2048-sha1-root.req]} {[LIT_CHARS -out]} {[LIT_CHARS out/2048-sha1-root.pem]} {[LIT_CHARS -text]} {[LIT_CHARS -signkey]} {[LIT_CHARS out/2048-sha1-root.key]} {[LIT_CHARS -extfile]} {[LIT_CHARS ca.cnf]} {[LIT_CHARS -extensions]} {[LIT_CHARS ca_cert]}
    more_env=[('CA_COMMON_NAME', {[DQ [LIT_CHARS "Test Dup-Hash Root CA"]]})]
  )
  (Com {[LIT_CHARS try]} {[LIT_CHARS openssl]} {[LIT_CHARS x509]} {[LIT_CHARS -req]} {[LIT_CHARS -days]} {[LIT_CHARS 3650]} {[LIT_CHARS -md5]} {[LIT_CHARS -in]} {[LIT_CHARS out/2048-sha1-root.req]} {[LIT_CHARS -out]} {[LIT_CHARS out/2048-md5-root.pem]} {[LIT_CHARS -text]} {[LIT_CHARS -signkey]} {[LIT_CHARS out/2048-sha1-root.key]} {[LIT_CHARS -extfile]} {[LIT_CHARS ca.cnf]} {[LIT_CHARS -extensions]} {[LIT_CHARS ca_cert]}
    more_env=[('CA_COMMON_NAME', {[DQ [LIT_CHARS "Test Dup-Hash Root CA"]]})]
  )
  (Com {[LIT_CHARS try]} {[LIT_CHARS openssl]} {[LIT_CHARS req]} {[LIT_CHARS -new]} {[LIT_CHARS -keyout]} {[LIT_CHARS out/ok_cert.key]} {[LIT_CHARS -out]} {[LIT_CHARS out/ok_cert.req]} {[LIT_CHARS -config]} {[LIT_CHARS ee.cnf]})
  (Com {[LIT_CHARS try]} {[LIT_CHARS openssl]} {[LIT_CHARS ca]} {[LIT_CHARS -batch]} {[LIT_CHARS -extensions]} {[LIT_CHARS user_cert]} {[LIT_CHARS -days]} {[LIT_CHARS 3650]} {[LIT_CHARS -in]} {[LIT_CHARS out/ok_cert.req]} {[LIT_CHARS -out]} {[LIT_CHARS out/ok_cert.pem]} {[LIT_CHARS -config]} {[LIT_CHARS ca.cnf]}
    more_env=[('CA_COMMON_NAME', {[DQ [LIT_CHARS "Test Dup-Hash Root CA"]]})]
  )
  (Com {[LIT_CHARS try]} {[LIT_CHARS openssl]} {[LIT_CHARS x509]} {[LIT_CHARS -text]} {[LIT_CHARS -in]} {[LIT_CHARS out/2048-md5-root.pem]} {[LIT_CHARS -out]} {[LIT_CHARS ../certificates/cross-signed-root-md5.pem]})
  (Com {[LIT_CHARS try]} {[LIT_CHARS openssl]} {[LIT_CHARS x509]} {[LIT_CHARS -text]} {[LIT_CHARS -in]} {[LIT_CHARS out/2048-sha1-root.pem]} {[LIT_CHARS -out]} {[LIT_CHARS ../certificates/cross-signed-root-sha1.pem]})
  (Com {[LIT_CHARS try]} {[LIT_CHARS openssl]} {[LIT_CHARS x509]} {[LIT_CHARS -text]} {[LIT_CHARS -in]} {[LIT_CHARS out/ok_cert.pem]} {[LIT_CHARS -out]} {[LIT_CHARS ../certificates/cross-signed-leaf.pem]})
)