Run `openssl x509` on each of certificates obtained with `openssl s_client`

each-cert.sh

#
# Copyright 2022 zunda <zundan at gmail.com>
#
# Permission is granted for use, copying, modification, distribution,
# and distribution of modified versions of this work as long as the
# above copyright notice is included.
#
connectname=mastodon.zunda.ninja
servername=$connectname

IFS=@
for pem in `:| openssl s_client -showcerts -connect $connectname:443 -servername $servername 2>/dev/null |\
  sed -n 's/-----END CERTIFICATE-----/&@/;/-----BEGIN CERTIFICATE-----/,/-----END CERTIFICATE-----/p'`; do
  echo $pem | openssl x509 -inform pem -noout -text -certopt no_pubkey,no_sigdump
done