openssl s_client -servername <hostname> -connect <hostname>:443 </dev/null | openssl x509 -outform DER > <hostname>.der