crtchk.sh

chkcrt.sh

#! /bin/zsh
# Very much low-fi, low-tech shortcut to check a domain name passed via stdin and return details about the certificate.
# If `ca` is passed, the "CA Issuers" string is grepped from the output.
domain=${1%/}
echo $domain
if [[ $2 == "ca" ]]; then
  echo | openssl s_client -showcerts -servername $domain -connect $domain:443 2>/dev/null | openssl x509 -inform pem -noout -text | grep "CA Issuers";
else
  echo | openssl s_client -showcerts -servername $domain -connect $domain:443 2>/dev/null | openssl x509 -inform pem -noout -text;
fi