$ openssl s_client -crlf -ssl3 -connect imap.freenet.de:993 CONNECTED(00000003) depth=2 C = DE, O = Deutsche Telekom AG, OU = T-TeleSec Trust Center, CN = Deutsche Telekom Root CA 2 verify error:num=19:self signed certificate in certificate chain verify return:0 --- Certificate chain 0 s:/C=DE/O=freenet.de GmbH/ST=Hamburg/L=Hamburg/emailAddress=abuse@freenet.de/CN=*.freenet.de i:/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2 1 s:/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2 i:/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2 2 s:/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2 i:/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2 --- Server certificate -----BEGIN CERTIFICATE----- MIIHOjCCBiKgAwIBAgIJAL1u0KLIlnZYMA0GCSqGSIb3DQEBCwUAMIHZMQswCQYD VQQGEwJERTElMCMGA1UEChMcVC1TeXN0ZW1zIEludGVybmF0aW9uYWwgR21iSDEf MB0GA1UECxMWVC1TeXN0ZW1zIFRydXN0IENlbnRlcjEcMBoGA1UECBMTTm9yZHJo ZWluIFdlc3RmYWxlbjEOMAwGA1UEERMFNTcyNTAxEDAOBgNVBAcTB05ldHBoZW4x IDAeBgNVBAkTF1VudGVyZSBJbmR1c3RyaWVzdHIuIDIwMSAwHgYDVQQDExdUZWxl U2VjIFNlcnZlclBhc3MgREUtMjAeFw0xNDA0MTAxNTA4NDlaFw0xNzA0MTUyMzU5 NTlaMIGDMQswCQYDVQQGEwJERTEYMBYGA1UEChMPZnJlZW5ldC5kZSBHbWJIMRAw DgYDVQQIEwdIYW1idXJnMRAwDgYDVQQHEwdIYW1idXJnMR8wHQYJKoZIhvcNAQkB FhBhYnVzZUBmcmVlbmV0LmRlMRUwEwYDVQQDDAwqLmZyZWVuZXQuZGUwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVbA9ecEEcW2pojjMveb1SObg5ZJjE 1a9Hr+Y4oeu0HFUz3YX+T24WkA1t5vOUEYuX4U3bhwpiogWKbptzCC0TQDH8JYMU pz6msCYBxDY1t7BQ6gaul/PMXBhul85glVa2TwrEEoQIsAVn63+dE8mxDCIy/ghm H5CFL8fbpWPeZ0jum0rLcZ0H2gU2B7jWMU37p9/IHEP/4XKc/Z7D7GoWakt0H0as GLscoqYNeaePIMXV+UrYtxbsOvjVfHkqnO80D1MtVqD9gX5Aw2hgeU+zhRdU5PIc qf3WeCJKeYnnnHqeCn0MH9oUUxuRyKi2Q5cG1c+f6eg6+jLGs4YQt9MlAgMBAAGj ggNXMIIDUzAfBgNVHSMEGDAWgBRUBClvopPGkDFFwD3eK+IKaYCSXzAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMB0GA1UdDgQW BBQLywvC+I4Cg8DT1pHD1bnLy1COuDBZBgNVHSAEUjBQMEQGCSsGAQQBvUcNAjA3 MDUGCCsGAQUFBwIBFilodHRwOi8vd3d3LnRlbGVzZWMuZGUvc2VydmVycGFzcy9j cHMuaHRtbDAIBgZngQwBAgIwggEhBgNVHR8EggEYMIIBFDBFoEOgQYY/aHR0cDov L2NybC5zZXJ2ZXJwYXNzLnRlbGVzZWMuZGUvcmwvVGVsZVNlY19TZXJ2ZXJQYXNz X0RFLTIuY3JsMIHKoIHHoIHEhoHBbGRhcDovL2xkYXAuc2VydmVycGFzcy50ZWxl c2VjLmRlL2NuPVRlbGVTZWMlMjBTZXJ2ZXJQYXNzJTIwREUtMixvdT1ULVN5c3Rl bXMlMjBUcnVzdCUyMENlbnRlcixvPVQtU3lzdGVtcyUyMEludGVybmF0aW9uYWwl MjBHbWJILGM9ZGU/Y2VydGlmaWNhdGVSZXZvY2F0aW9ubGlzdD9iYXNlP2NlcnRp ZmljYXRlUmV2b2NhdGlvbmxpc3Q9KjCCATkGCCsGAQUFBwEBBIIBKzCCAScwMwYI KwYBBQUHMAGGJ2h0dHA6Ly9vY3NwLnNlcnZlcnBhc3MudGVsZXNlYy5kZS9vY3Nw cjBMBggrBgEFBQcwAoZAaHR0cDovL2NybC5zZXJ2ZXJwYXNzLnRlbGVzZWMuZGUv Y3J0L1RlbGVTZWNfU2VydmVyUGFzc19ERS0yLmNlcjCBoQYIKwYBBQUHMAKGgZRs ZGFwOi8vbGRhcC5zZXJ2ZXJwYXNzLnRlbGVzZWMuZGUvY249VGVsZVNlYyUyMFNl cnZlclBhc3MlMjBERS0yLG91PVQtU3lzdGVtcyUyMFRydXN0JTIwQ2VudGVyLG89 VC1TeXN0ZW1zJTIwSW50ZXJuYXRpb25hbCUyMEdtYkgsYz1kZT9jQUNlcnRpZmlj YXRlMAwGA1UdEwEB/wQCMAAwFwYDVR0RBBAwDoIMKi5mcmVlbmV0LmRlMA0GCSqG SIb3DQEBCwUAA4IBAQCPpaF9t/lbmURadLzxOiu8fw+uh49vHZ1gl1MoMk6dq2MS x8fG5faT7PEgOG/Fu602TkKC/+fZ1PcP6GX5FyDi+5ch/WWj/nrK8dGp1kLN1Vys t5ymKoo7TLH2CRL6bjzCMzfQMOVI728+eGVZbG4Sn1D+0oGVFPhlLkSuWg2psGu/ VnbYwsajVLLgk6FfL/ds95ah1c3afog6INdg/h2A8Q7aNFPtM/6G0oBUS9SgUKJz QuN0C1DwHfiPkqmuYyUDVJTzNy17HdCiurgY+iRupVZ+AG1Y5vM2HK5l9EalD1xg kkps3VgU/eu5vtSQ+L/LuMSdoKUkY7syoxUqT2ef -----END CERTIFICATE----- subject=/C=DE/O=freenet.de GmbH/ST=Hamburg/L=Hamburg/emailAddress=abuse@freenet.de/CN=*.freenet.de issuer=/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2 --- No client certificate CA names sent --- SSL handshake has read 5522 bytes and written 504 bytes --- New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE SSL-Session: Protocol : SSLv3 Cipher : DHE-RSA-AES256-SHA Session-ID: A11CA925A2B8F7E7B7BD27A8B6E6197CC403EEC84B81033FEDD5EB1A56CC79AC Session-ID-ctx: Master-Key: 49FDFE23D1A0BAEB02F44E76E77E2E2459FCCFFCBA696421A03200C49D3670929D510276468C8319BBB47320A27193A9 Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None Start Time: 1413453101 Timeout : 7200 (sec) Verify return code: 19 (self signed certificate in certificate chain) --- * OK IMAP ready.