echo | openssl s_client -servername NAME -connect HOST:PORT 2>/dev/null | openssl x509 -noout -dates

https://www.shellhacks.com/openssl-check-ssl-certificate-expiration-date/