grab all dc certificates

nslookup YOUR_DOMAIN_HERE | grep "Address: " | awk '{ print $NF }' | while read _HOST ; do echo | openssl s_client -connect ${_HOST}:636 2>/dev/null | openssl x509 -text | grep -A 100 "BEGIN CERTIFICATE" > ${_HOST}.pem ; done