View certificate chains with Open SSL

openssl s_client -showcerts -connect <host>:<port>

Check certificate expiry as follows

 openssl s_client -connect google.com:443 < /dev/null | openssl x509 -text | grep "Not After"