#!/bin/bash # split cert-chain received from server in seperate certificates openssl s_client -showcerts -servername someserverssniname.intra.dlr.de -connect someserver.intra.dlr.de:443 < /dev/null | sed -n -e '/BEGIN\ CERTIFICATE/,/END\ CERTIFICATE/ p' | csplit -f cert - '/-----BEGIN CERTIFICATE-----/' '{*}'