#!/bin/bash
# hanscees@hanscees.com version 28-12-2015

DOMAINS="www.test-backend.com www.thisisagreatwebsite.com"   #adjust
EMAILADMIN="hanscees@hanscees.con"    # adjust

LECROOT="/etc/letsencrypt/live"
for i in `echo $DOMAINS` ; do
#checkend is seconds. 1 week = 604800 sec 4 weeks 2419200 16 weeks = 9676800
  if openssl x509 -checkend  2419200 -noout -in $LECROOT/$i/cert.pem
  then
    echo "Certificate is good for another 4 weeks!"
  else
    echo "Certificate $i will expire within 4 weeks! (or is invalid/not found)"
    echo "Certificate $i will expire within 4 weeks! (or is invalid/not found)" |
    mail -s "TLS certificate $i will expire act now" $EMAILADMIN
fi
done #end forloop