find-broken-certs

#!/bin/bash
declare -a subjects=()
cdupe() { grep -i begin.cert -A 3 ${1:-} | sort -u | wc -l ; }
for i in /etc/frbitx/container/haproxy/certs/*;
do
		uniq_lines=`cdupe $i`;
		if [[ $uniq_lines == 5 ]]; then
			subject=$(openssl x509 -noout -in $i -subject |
				awk '{ print $(NF)}')
			echo broken: $i $subject
			subjects+=($subject)
		fi
done
lewatch renew -r -s 222 ${subjects[@]}