Replace shell with command in order to allow the task to fail when openssl x509 does return zero (#3516)
