Get Serveur Chain Certs info - subject fingerprint issuer startdate enddate

getCertInfo.sh

# DON'T !
# Never ever execute command you do not have control on 
# The returned cert could contain ";some malicious commands;" that would be executed by the awk:system

SERVER="google.com"
PORT=443

openssl s_client \
  -showcerts \
  -connect ${SERVER}:${PORT} \
  < /dev/null 2>/dev/null \
| awk '
  BEGIN{cert=""}
  /^-----BEGIN CERTIFICATE-----$/{
    flag=1
  }
  /^-----END CERTIFICATE-----$/{
    flag=0
    cert=cert$0
    system("echo \"" cert "\" | openssl x509 -subject -fingerprint -issuer -startdate -enddate -noout; echo")
    cert=""
  }
  flag==1{ cert=cert$0"\n" }
'