From f0c38533f57242fc184e21d2e8a57db0f7c49d66 Mon Sep 17 00:00:00 2001
From: Jim Myhrberg <jim@krystal.io>
Date: Thu, 9 May 2024 09:28:11 +0100
Subject: [PATCH] feat(zsh/aliases): add root-ca shell function to print root
 CA certs for domains

---
 zsh/aliases.zsh | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/zsh/aliases.zsh b/zsh/aliases.zsh
index bbd8708..623e6c6 100644
--- a/zsh/aliases.zsh
+++ b/zsh/aliases.zsh
@@ -101,3 +101,13 @@ extract() {
   fi
 }
 alias ext=extract
+
+root-ca() {
+  local hostname="$1"
+  local port="${2:-443}"
+  echo |
+    openssl s_client \
+      -servername "$hostname" \
+      -connect "${hostname}:${port}" 2> /dev/null |
+    openssl x509 -noout -text
+}