Oh, hey, if for some reason you have a need to inspect a cert bundle of PEM files, I have a useful little tool for you. Kind of the love child of split(1), tee(1), and xargs(1): https://github.com/jschauma/xpipe This makes getting a cert bundles issuers out of pemblocks a single command: <cert.pem xpipe -p '^-----END CERTIFICATE-----$' \ openssl x509 -noout -issuer