#!/bin/sh CertExpiries=$(mktemp) for i in /etc/certificates/*.pem; do echo $(basename $i): $(openssl x509 -in $i -inform PEM -text -noout -enddate | grep "Not After" | tail -1 | awk '{print $4, $5, $7}') >> $CertExpiries done Date=$(date -ud "+1 day" | awk '{print $2, $3, $6}') Expiries=$(grep "$Date" $CertExpiries) if [ $? -eq 0 ]; then echo These Certificates expire TOMORROW! echo $Expiries echo fi for i in 2 7 14 30 60; do Date=$(date -ud "+$i day" | awk '{print $2, $3, $6}') Expiries=$(grep "$Date" $CertExpiries) if [ $? -eq 0 ]; then echo These Certificates expire in $i days: echo $Expiries echo fi done rm $CertExpiries;