openssl s_client -connect $HOST:443 -showcerts < /dev/null 2> /dev/null | openssl x509 -outform PEM > cert.pem – or – echo "GET" | openssl s_client -connect smtp.gmail.com:995 -showcerts | sed -n '/BEGIN CERTIFICATE/,/END CERTIFICATE/p' Source Source