openssl \ s_client \ -connect HOST:PORT 2>/dev/null <<< "Q" \ | openssl x509 -text \ | grep "Not After :"