-> % nmap -p 443 --script ssl-cert,ssl-google-cert-catalog google.com

Starting Nmap 7.12 ( https://nmap.org ) at 2016-08-30 06:34 CDT
Nmap scan report for google.com (172.217.4.238)
Host is up (0.012s latency).
Other addresses for google.com (not scanned): 2607:f8b0:4009:801::200e
rDNS record for 172.217.4.238: ord30s31-in-f238.1e100.net
PORT    STATE SERVICE
443/tcp open  https
| ssl-cert: Subject: commonName=*.google.com/organizationName=Google Inc/stateOrProvinceName=California/countryName=US
| Issuer: commonName=Google Internet Authority G2/organizationName=Google Inc/countryName=US
| Public Key type: ec
| Public Key bits: 256
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2016-08-17T18:56:43
| Not valid after:  2016-11-09T18:29:00
| MD5:   ef2a adf1 94e9 fe82 29f8 f08b a2df 5bf0
|_SHA-1: cec0 95c5 f825 b024 38a3 585e da89 3eef 9d8b 1b44
| ssl-google-cert-catalog:
|   No DB entry
|_  cec095c5f825b02438a3585eda893eef9d8b1b44.certs.googlednstest.com