Openssl get ca from url

openssl s_client -showcerts -connect cisco.com:443 </dev/null 2>/dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ca.crt