certchain
This is a utility for printing the X.509 certificate chain from a TLS
connection.
Note: while this will accept more than one server, it will print all
of the chains without any indication where one chain ends and the next
begins. This was the intended behaviour for the use case, but it may
not be applicable in other cases.
There are no knobs.
Examples:
$ certchain www.kyleisom.net
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIQaaTVw0yZFGAYvFDKAIo4BzANBgkqhkiG9w0BAQsFADCB
kDELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxNjA0BgNV
...