show_certificate_chain.bash

#!/bin/bash

openssl s_client -showcerts -connect example.org:443 < /dev/null \
| sed -n '/^-----BEGIN CERTIFICATE-----/,/^-----END CERTIFICATE-----/p' \
| {
  cert=
  while read -r; do
    cert+="${REPLY}"$'\n'
    if [[ "${REPLY}" == "-----END CERTIFICATE-----" ]]; then
      openssl x509 -in - -out - -text <<<"${cert}"
      cert=
    fi
  done
}