Bash script that checks each Let's Encrypt cert to make sure it won't expire soon

check_ssl_cert.sh

#!/bin/bash
for cert in `find /etc/letsencrypt/live -name 'cert.pem'` ; do
certpath=`/usr/bin/dirname $cert`
website=`basename $certpath`
if /usr/bin/openssl x509 -checkend 2592000 -noout -in $cert ; then
  echo "Cert for $website is good"
else
  echo "**Cert for $website is bad**"
fi
done

exit 0