A simple oneliner that I’ve had to look up three times now, so I’m blogging it:

openssl s_client -connect secure.gay.nl:443 | openssl x509 -noout -dates