diff --git a/common.nix b/common.nix
index 9b33888..3b69014 100644
--- a/common.nix
+++ b/common.nix
@@ -620,11 +620,11 @@ isoConfig
            echo "✅ Workshop ISO - NixOS $(nixos-version) - Built: $(cat /etc/workshop-build-info 2>/dev/null || echo 'unknown')"
 
           # Bash Completion Configuration
-          _workshop_completion() {
-            local cur prev
-            COMPREPLY=()
-            cur="''${COMP_WORDS[COMP_CWORD]}"
-            prev="''${COMP_WORDS[COMP_CWORD-1]}"
+           _workshop_completion() {
+             local cur prev
+             COMPREPLY=()
+             cur="${COMP_WORDS[COMP_CWORD]}"
+             prev="${COMP_WORDS[COMP_CWORD-1]}"
           
             case "$prev" in
               deploy|browser)
@@ -863,12 +863,22 @@ isoConfig
                }
              fi
 
-              # Generate certificate following abra guidelines
-              echo "   Generating RSA key and certificate (abra-compatible)..."
-              if openssl req -x509 -out "$CERT_FILE" -keyout "$KEY_FILE" \
-                -newkey rsa:2048 -nodes -sha256 -days 365 \
-                -subj "/CN=*.workshop.local" -extensions EXT -config <( \
-                 printf "[dn]\nCN=*.workshop.local\n[req]\ndistinguished_name = dn\n[EXT]\nsubjectAltName=DNS:*.workshop.local,DNS:workshop.local,DNS:localhost\nkeyUsage=digitalSignature\nextendedKeyUsage=serverAuth"); then
+               # Generate certificate following abra guidelines
+               echo "   Generating RSA key and certificate (abra-compatible)..."
+               if openssl req -x509 -out "$CERT_FILE" -keyout "$KEY_FILE" \
+                 -newkey rsa:2048 -nodes -sha256 -days 365 \
+                 -subj "/CN=*.workshop.local" -extensions EXT -config <( \
+                  cat <<EOF
+[dn]
+CN=*.workshop.local
+[req]
+distinguished_name = dn
+[EXT]
+subjectAltName=DNS:*.workshop.local,DNS:workshop.local,DNS:localhost
+keyUsage=digitalSignature
+extendedKeyUsage=serverAuth
+EOF
+                  ); then
 
                 echo "✅ Certificate generation completed successfully (abra-compatible)"
               else