#!/bin/bash
set -e

[[ -z $2 ]] && echo "usage: ${0##*/} <host> <port> [ip address]" && exit 1
host=$1
port=$2
[[ -n $3 ]] && ip=$3 || ip=$host

[[ ! -x `which openssl` ]] && echo install openssl or libressl first && exit 1

openssl version

echo Q | openssl s_client -servername $host -connect $ip:$port 2>/dev/null | \
	openssl x509 -noout -text | less

# -showcerts