#!/bin/sh openssl x509 -purpose -in servercert.pem -inform PEM -noout