function(escape_list INVAR OUTVAR)
    string(REGEX REPLACE "([^;]* [^;]*)" "\"\\1\"" CR "${INVAR}")
    set("${OUTVAR}" "${CR}" PARENT_SCOPE)
endfunction()

list(APPEND C "signtool")
list(APPEND C "sign")
list(APPEND C "/f")
list(APPEND C "C:/Users/Elvis/Dev/digicert/orexplore-code-signing.p12")
list(APPEND C "/p")
list(APPEND C "<digicert-password>")
list(APPEND C "/tr")
list(APPEND C "http://timestamp.digicert.com")
list(APPEND C "C:/Users/Elvis/Dev/buildbot worker/b-insight-win/build/build/_CPack_Packages/win64/WIX/Orexplore-Insight-1.0.2-230-gcc471e0-win64/H5Zblosc.dll")
list(APPEND C "C:/Users/Elvis/Dev/buildbot worker/b-insight-win/build/build/_CPack_Packages/win64/WIX/Orexplore-Insight-1.0.2-230-gcc471e0-win64/KF5Archive.dll")

escape_list("${C}" C2)
string(REPLACE ";" " " CR2 "${C2}")
message(STATUS "CR2 = ${CR2}")

> -- CR2 = signtool sign /f C:/Users/Elvis/Dev/digicert/orexplore-code-signing.p12 /p <digicert-password> /tr http://timestamp.digicert.com "C:/Users/Elvis/Dev/buildbot worker/b-insight-win/build/build/_CPack_Packages/win64/WIX/Orexplore-Insight-1.0.2-230-gcc471e0-win64/H5Zblosc.dll" "C:/Users/Elvis/Dev/buildbot worker/b-insight-win/build/build/_CPack_Packages/win64/WIX/Orexplore-Insight-1.0.2-230-gcc471e0-win64/KF5Archive.dll"