#!/bin/sh

true | openssl s_client -connect host:443 | openssl x509 -out /usr/local/share/ca-certificates/host.crt
update-ca-certificates