$ openssl s_client -ssl3 -connect gmx.net:443
CONNECTED(00000003)
depth=2 C = DE, O = Deutsche Telekom AG, OU = T-TeleSec Trust Center, CN = Deutsche Telekom Root CA 2
verify error:num=19:self signed certificate in certificate chain
verify return:0
---
Certificate chain
 0 s:/C=DE/O=1&1 Mail & Media GmbH/ST=Rhineland-Palatinate/L=Montabaur/emailAddress=server-certs@1und1.de/CN=*.web.de
   i:/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2
 1 s:/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2
   i:/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2
 2 s:/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2
   i:/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2
---
Server certificate
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
subject=/C=DE/O=1&1 Mail & Media GmbH/ST=Rhineland-Palatinate/L=Montabaur/emailAddress=server-certs@1und1.de/CN=*.web.de
issuer=/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2
---
No client certificate CA names sent
---
SSL handshake has read 5235 bytes and written 352 bytes
---
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES128-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : SSLv3
    Cipher    : DHE-RSA-AES128-SHA
    Session-ID: C51265D9FFC964514976ADE19D1864C41EEA399E3E8432EC9EBE0EB66EC93E89
    Session-ID-ctx: 
    Master-Key: 3526016C8EC09BE9382325AB7CFC71DE46F401E4193131592DCBCEC73F4C3D67E37AA5F652830E964742AD699124C397
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1413453752
    Timeout   : 7200 (sec)
    Verify return code: 19 (self signed certificate in certificate chain)
---