$ openssl s_client -starttls smtp -crlf -ssl3 -connect mx01.emig.gmx.net:25
CONNECTED(00000003)
depth=2 C = DE, O = Deutsche Telekom AG, OU = T-TeleSec Trust Center, CN = Deutsche Telekom Root CA 2
verify error:num=19:self signed certificate in certificate chain
verify return:0
---
Certificate chain
 0 s:/C=DE/O=1&1 Mail & Media GmbH/ST=Rhineland-Palatinate/L=Montabaur/emailAddress=server-certs@1und1.de/CN=mx.gmx.net
   i:/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2
 1 s:/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2
   i:/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2
 2 s:/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2
   i:/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=DE/O=1&1 Mail & Media GmbH/ST=Rhineland-Palatinate/L=Montabaur/emailAddress=server-certs@1und1.de/CN=mx.gmx.net
issuer=/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2
---
No client certificate CA names sent
---
SSL handshake has read 5707 bytes and written 515 bytes
---
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : SSLv3
    Cipher    : DHE-RSA-AES256-SHA
    Session-ID: F3946BAC8A4DEBC8D39A2E5AC1CC77FC2B780FEA8E094FF4F49999D523F70914
    Session-ID-ctx: 
    Master-Key: 0A3C3A9167CE69AE360605EF9F65745B1FF00242AA6F77802C1B769C6C341E9D993B0E437FE8E782FEC37714944B3E69
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1413453438
    Timeout   : 7200 (sec)
    Verify return code: 19 (self signed certificate in certificate chain)
---
250 STARTTLS