echo | openssl s_client -servername <host> -connect <host>:8883 2>/dev/null | openssl x509 -text > /etc/ssl/ca.pem