vault list /pki/certs but with more info

list.sh

# Enumerates vault /pki/certs outputting subject and SAN of certificates.
# openssl must be of latest version

vault list -format json  /pki/certs | jq -r .[] | while read serial; do data=$(vault read -format=json pki/cert/$serial); (echo "$data" | jq -er '.data.revocation_time > 0 ' >/dev/null) && echo "******REVOKED*******" || echo "-------- OK --------"; echo $serial;  echo "$data" | jq -r '.data.certificate' | openssl x509 -noout -nameopt RFC2253  -subject -enddate -ext subjectAltName 2>/dev/null; echo; done