Check when a TLS certificate expires

echo | openssl s_client -servername shop.example.com -connect shop.example.com:443 2>/dev/null 
  | openssl x509 -noout -dates