cert-check.sh

#!/bin/bash

set -o errexit
set -o pipefail
set -o nounset

function check () {
  local domain="$1"

 
  certificate_info=$(mktemp)
  # openssl doesn't exit 0 in some cases
  openssl s_client -connect "${domain}:443" -servername "${domain}" < /dev/null > "$certificate_info" 2>&1 || true

  if grep -q DigiCert "$certificate_info"; then
    echo ok
  else
    echo fail
  fi

  rm -rf "$certificate_info"
}

while read domain; do
  echo "$domain"... $(check "$domain")
done