#! /usr/bin/env bash
set -euo pipefail

nix-shell -p openssl \
    --command "openssl s_client -showcerts -connect $1 </dev/null 2>/dev/null|openssl x509 -outform PEM > $2"