#!/bin/bash
CERT_DIR="/opt/syngx/ssl"

for c in "$CERT_DIR"/*.pem; do
  [ -f "$c" ] || continue
  name=$(basename "$c")
  end=$(openssl x509 -noout -enddate -in "$c" | cut -d= -f2)
  end_epoch=$(date -d "$end" +%s)
  now_epoch=$(date +%s)
  diff=$(( (end_epoch - now_epoch) / 86400 ))

  if [ "$diff" -lt 14 ]; then
    printf "\033[0;31m%-40s %s\033[0m\n" "$name" "$end"
  elif [ "$diff" -le 30 ]; then
    printf "\033[0;33m%-40s %s\033[0m\n" "$name" "$end"
  else
    printf "%-40s %s\n" "$name" "$end"
  fi
done