inspect-tls-cert.sh

#!/bin/bash
#
# Usage:
# $ inspect-tls-cert.sh facebook.com

set -eux

server=${1:-"stripe.com"}
certfile=/tmp/${server}.cert
openssl_client_connect="openssl s_client -connect ${server}:443 -servername ${server}"

echo "Downloading TLS cert for ${server} to ${certfile}"
echo | ${openssl_client_connect} | openssl x509 > ${certfile}

echo "Inspecting TLS cert at ${certfile}"
openssl x509 -in ${certfile} -text -noout