Get SSL cert from website, convert as needed

ssl_certs.sh

### Use openssl to get the cert from a site

## Get the PEM cert
openssl s_client -showcerts -connect example.com:443 </dev/null 2> /dev/null | openssl x509 -outform PEM > cert.pem

## If the server is using SNI, you'll need to pass the hostname of the cert you want
# openssl s_client -showcerts -servername www.example.com -connect $WEBSITE:443 </dev/null 2> /dev/null | openssl x509 -outform PEM > cert.pem


## Get the DER cert
# openssl s_client -showcerts -connect example.com:443 </dev/null 2> /dev/null | openssl x509 -outform DER > cert.crt

## Convert as needed

## Convert from pkcs12 (IIS)
# openssl pkcs12 -in cert.pfx -out cert.pem -nodes

## Convert to pkcs12
# openssl pkcs12 -export -out cert.pfx -inkey keyfile.key -in cert.pem