Fetches a host's SSL certificate and displays the cert chain info.

Show-Certificate.ps1

$checkHost = "www.azure.com"

try {
    # Create a TCP client and connect to the server using the URL and port 443
    $client = New-Object System.Net.Sockets.TcpClient($checkHost, 443)

    # Create an SslStream using the TCP client and set the remote certificate validation callback
    $sslStream = New-Object System.Net.Security.SslStream($client.GetStream(), $false, { $true })

    # Authenticate the client
    $sslStream.AuthenticateAsClient($checkHost)

    # Get the server certificate and display the full certificate chain
    $serverCertificate = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2($sslStream.RemoteCertificate)
    Write-Host "Server certificate chain for host: $checkHost"
    $chain = New-Object System.Security.Cryptography.X509Certificates.X509Chain
    $chain.Build($serverCertificate)
    foreach ($element in $chain.ChainElements) {
        Write-Host $element.Certificate.Subject
    }

    # Close the SSL stream and TCP client
    $sslStream.Close()
    $client.Close()
}
catch {
    $err = $_
    Write-Host "ERROR: $($err.Exception.Message)"
    Write-Host "`nException Detail:`n$($err.Exception.ToString())"

    Exit 1
}