How to Check SSL Certificate Expiry in Python

import socket
import ssl
from datetime import datetime

def check_cert_expiry(hostname, port=443):
    context = ssl.create_default_context()
    with socket.create_connection((hostname, port), timeout=10) as sock:
        with context.wrap_socket(sock, server_hostname=hostname) as tls_sock:
            cert = tls_sock.getpeercert()
            expiry_str = cert['notAfter']
            expiry_date = datetime.strptime(expiry_str, '%b %d %H:%M:%S %Y %Z')
            days_left = (expiry_date - datetime.utcnow()).days
            return {
                'hostname': hostname,
                'expires': expiry_str,
                'days_left': days_left,
                'status': 'expired' if days_left < 0 else 'valid'
            }

if __name__ == "__main__":
    result = check_cert_expiry('example.com')
    print(f"Certificate for {result['hostname']} expires on: {result['expires']}")
    print(f"Days remaining: {result['days_left']}")
    print(f"Status: {result['status']}")