keychain_certs

#!/bin/bash

security find-certificate -a /System/Library/Keychains/SystemRootCertificates.keychain

used_certs

#!/bin/bash

function get_root_cert() {
    host=$1
    echo x |
    openssl s_client -connect $host:443 2> /dev/null |
    sed -n "s/.*:\/C=.*CN=\(.*\)$/\1/p" |
    tail -1
}

query="
SELECT DISTINCT
substr(url, 9, instr(substr(url, 9), '/') - 1)
FROM urls
WHERE url
LIKE 'https%';
"

#histfile="History"
histfile="$HOME/Library/Application Support/Google/Chrome/Default/History"

temphistory="./temphistory"

# Copy the history since it's probably locked by Chrome
cp "$histfile" "$temphistory"

# Get all hosts from the history sqlite file that use HTTPS
sqlite3 "$temphistory" "$query" > urls.dump

hosts=$(tail -5 urls.dump)
#hosts=$(cat urls.dump)

rm -f certs.dump
for host in $hosts ; do
    get_root_cert $host >> certs.dump
done
sort certs.dump | uniq -c | sort -nr