$ openssl s_client -starttls smtp -crlf -ssl3 -connect gmail-smtp-in.l.google.com:25 CONNECTED(00000003) depth=2 C = US, O = GeoTrust Inc., CN = GeoTrust Global CA verify error:num=20:unable to get local issuer certificate verify return:0 --- Certificate chain 0 s:/C=US/ST=California/L=Mountain View/O=Google Inc/CN=mx.google.com i:/C=US/O=Google Inc/CN=Google Internet Authority G2 1 s:/C=US/O=Google Inc/CN=Google Internet Authority G2 i:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA 2 s:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA i:/C=US/O=Equifax/OU=Equifax Secure Certificate Authority --- Server certificate -----BEGIN CERTIFICATE----- MIIGhDCCBWygAwIBAgIIa7+rjwrecGgwDQYJKoZIhvcNAQEFBQAwSTELMAkGA1UE BhMCVVMxEzARBgNVBAoTCkdvb2dsZSBJbmMxJTAjBgNVBAMTHEdvb2dsZSBJbnRl cm5ldCBBdXRob3JpdHkgRzIwHhcNMTQwNzE1MDg1NjE2WhcNMTUwNDA0MTUxNTU1 WjBnMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwN TW91bnRhaW4gVmlldzETMBEGA1UECgwKR29vZ2xlIEluYzEWMBQGA1UEAwwNbXgu Z29vZ2xlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALXdZYGb 7GeyejZTesdEdsOt++RnNBWbXrpJR4pXU6F0iHzSBoP6FJLx755vKFlc7H/LicAL dATo8MT6mPlJLUByivEQBzt+ueZOX1iNcYw3NEZXRjtEllxyYmQfHNFatjNAhCwV o9euyYkut8CVwS/QJccCHs6fNoD7FcXJu8XfiRS2asKwFtxosXxH54VaOwNaeGbC UOcT8jxYD5Nnp2luQZofVCIeeHOG9kRP7sUDdBvX7uTneetZLkn2CQQoisd9I4QE 6Gq3GRPeE9MkcY7e71+CYkTdUVLfzIYmkmg/MaN7rce4gTCzvQJ8D7ZF14GKk3Ih YHSTda5NRUARp/0CAwEAAaOCA1AwggNMMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjCCAiYGA1UdEQSCAh0wggIZghJhc3BteC5sLmdvb2dsZS5jb22CF2Fs dDEuYXNwbXgubC5nb29nbGUuY29tghdhbHQyLmFzcG14LmwuZ29vZ2xlLmNvbYIX YWx0My5hc3BteC5sLmdvb2dsZS5jb22CF2FsdDQuYXNwbXgubC5nb29nbGUuY29t ghpnbWFpbC1zbXRwLWluLmwuZ29vZ2xlLmNvbYIfYWx0MS5nbWFpbC1zbXRwLWlu LmwuZ29vZ2xlLmNvbYIfYWx0Mi5nbWFpbC1zbXRwLWluLmwuZ29vZ2xlLmNvbYIf YWx0My5nbWFpbC1zbXRwLWluLmwuZ29vZ2xlLmNvbYIfYWx0NC5nbWFpbC1zbXRw LWluLmwuZ29vZ2xlLmNvbYIYZ21yLXNtdHAtaW4ubC5nb29nbGUuY29tgh1hbHQx Lmdtci1zbXRwLWluLmwuZ29vZ2xlLmNvbYIdYWx0Mi5nbXItc210cC1pbi5sLmdv b2dsZS5jb22CHWFsdDMuZ21yLXNtdHAtaW4ubC5nb29nbGUuY29tgh1hbHQ0Lmdt ci1zbXRwLWluLmwuZ29vZ2xlLmNvbYINbXguZ29vZ2xlLmNvbYIVYXNwbXgyLmdv b2dsZW1haWwuY29tghVhc3BteDMuZ29vZ2xlbWFpbC5jb22CFWFzcG14NC5nb29n bGVtYWlsLmNvbYIVYXNwbXg1Lmdvb2dsZW1haWwuY29tMGgGCCsGAQUFBwEBBFww WjArBggrBgEFBQcwAoYfaHR0cDovL3BraS5nb29nbGUuY29tL0dJQUcyLmNydDAr BggrBgEFBQcwAYYfaHR0cDovL2NsaWVudHMxLmdvb2dsZS5jb20vb2NzcDAdBgNV HQ4EFgQUBZHrxONQ35UlBbfg/kH906dTK4YwDAYDVR0TAQH/BAIwADAfBgNVHSME GDAWgBRK3QYWG7z2aLV29YG2u2IaulqBLzAXBgNVHSAEEDAOMAwGCisGAQQB1nkC BQEwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL3BraS5nb29nbGUuY29tL0dJQUcy LmNybDANBgkqhkiG9w0BAQUFAAOCAQEAcdpfy9yMh4NR4jtm7MPkk11iL81mDbTy 3L/sO2p1NrEUTiUtVKhV0hwOO7+tsOTfd1iR07QUFCiRW2GTlGpy4gvgXdAleT7e 1kKRIrD4p7O99xhmoKbaNVIGHMHoP393dmoFOV+OzdMjN4NTZwyvKieo5RuE/zOW yjFt89bvnApJcpnY6sHoWeKvioBA4YiCU/U1Cb/8DMZ9yX9RkSqUJ0gosInMkTKg H0wvLQNhSkbUYaRPme9FjFrvgDx/IFmzS1Fx2qSwRJUuAwbPd9cOefi+eXAfg9Mx 3aZYDlObs8lWrwjARkl9HpGdI4WUTRMwSCSuf51npgwVaa+PIiX9fg== -----END CERTIFICATE----- subject=/C=US/ST=California/L=Mountain View/O=Google Inc/CN=mx.google.com issuer=/C=US/O=Google Inc/CN=Google Internet Authority G2 --- No client certificate CA names sent --- SSL handshake has read 4373 bytes and written 319 bytes --- New, TLSv1/SSLv3, Cipher is ECDHE-RSA-RC4-SHA Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE SSL-Session: Protocol : SSLv3 Cipher : ECDHE-RSA-RC4-SHA Session-ID: 61BFA3A5542211C055E76126A6A4F8CAA2BAA38F4A59C6ED3B97F95B0B685700 Session-ID-ctx: Master-Key: 0D60A491C119A35A97DFFE10E754590A4C76F6613FC4D6EB1CC8EC74F6FE7D848A22D8E95CAF237F32B0FD870347FB4F Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None Start Time: 1413453492 Timeout : 7200 (sec) Verify return code: 20 (unable to get local issuer certificate) --- 250 SMTPUTF8