check credhub certificate expiration dates

#!/bin/bash

cert_names=`credhub curl -p /api/v1/certificates | jq '.certificates | .[].name'`

for cert in $cert_names; do
  cert_json=`credhub get -n $cert --output-json`
  echo $cert_json | jq '.value | .ca' -r > /tmp/tmpca
  echo $cert_json | jq '.value | .certificate' -r > /tmp/tmpcert

  if [[ $(< /tmp/tmpca) != "null" ]]; then
    date=$(openssl x509 -enddate -in /tmp/tmpca -noout | cut -d= -f 2)
    echo "${date} -> ${cert}.ca"
  fi

  if [[ $(< /tmp/tmpcert) != "null" ]]; then
    date=$(openssl x509 -enddate -in /tmp/tmpcert -noout | cut -d= -f 2)
    echo "${date} -> ${cert}.certificate"
  fi

  rm /tmp/tmpca
  rm /tmp/tmpcert
done