check_ssl_issuer.sh

#!/usr/bin/env bash
$id=$1
for dom in $(aws route53 list-resource-record-sets --hosted-zone-id $id --query "ResourceRecordSets[?Type == 'A']" | jq '.[]["Name"]' | sort | uniq | tr -d '"' | sed 's/\.$//');do
  echo $dom $(openssl s_client -servername $dom -port 443 -showcerts -host $dom </dev/null 2>/dev/null  | grep issuer)
done
for dom in $(aws route53 list-resource-record-sets --hosted-zone-id $id --query "ResourceRecordSets[?Type == 'CNAME']" | jq '.[]["Name"]' | sort | uniq | tr -d '"' | sed 's/\.$//');do
  echo $dom $(openssl s_client -servername $dom -port 443 -showcerts -host $dom </dev/null 2>/dev/null  | grep issuer)
done