پایش انقضای گواهی‌های SSL

import socket
import ssl
from datetime import datetime, timezone

DOMAINES = ["exemple.fr", "api.exemple.fr", "shop.exemple.fr", "blog.exemple.fr"]
ctx = ssl.create_default_context()

print(f"{'domaine':<18} {'expire le':<12} {'restant':>8}  état")
print("-" * 50)
for dom in DOMAINES:
    with ctx.wrap_socket(socket.create_connection((dom, 443), 5),
                         server_hostname=dom) as s:
        brut = s.getpeercert()["notAfter"]
    fin = datetime.strptime(brut, "%b %d %H:%M:%S %Y %Z").replace(tzinfo=timezone.utc)
    restant = (fin - datetime.now(timezone.utc)).days
    etat = "OK" if restant > 30 else ("BIENTOT" if restant > 7 else "URGENT")
    print(f"{dom:<18} {fin:%Y-%m-%d}     {restant:>4} j  {etat}")