#!/bin/bash
# use openssl client to check whether host SSL certificate is External (Internet certificate) or internal (Intranet cert)
# on Internal expect output like
## -bash-4.1$ ./ssl_isssuer_check.sh ffx.intranet.eon.com
## issuer=/C=DE/O=EON/OU=CA/CN=E.ON Internal Devices Sub CA V3
# Written by Anatoliy Dimitrov

echo -n | openssl s_client -connect ${1}:443 2>/dev/null |grep 'issuer='