# tunnel to view hadoop admin pages locally (e.g., links http://localhost:50030)
ssh -f user@hadoop.login.host -L 50070:namenode.host:50070 -L 50030:jobtracker.host:50030 -N

# get cert
openssl s_client -connect some.host:993 < /dev/null 2>/dev/null | openssl x509 -fingerprint -noout -in /dev/stdin | sed "s|:||g"