$ openssl s_client -starttls smtp -crlf -ssl3 -connect smtp.strato.de:587
CONNECTED(00000003)
depth=1 C = DE, O = T-Systems International GmbH, OU = T-Systems Trust Center, ST = Nordrhein Westfalen, postalCode = 57250, L = Netphen, street = Untere Industriestr. 20, CN = TeleSec ServerPass DE-2
verify error:num=20:unable to get local issuer certificate
verify return:0
---
Certificate chain
 0 s:/C=DE/O=Strato AG/OU=Rechenzentrum/ST=Berlin/L=Berlin/CN=smtp.strato.de
   i:/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2
 1 s:/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2
   i:/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=DE/O=Strato AG/OU=Rechenzentrum/ST=Berlin/L=Berlin/CN=smtp.strato.de
issuer=/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2
---
No client certificate CA names sent
---
SSL handshake has read 4532 bytes and written 394 bytes
---
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : SSLv3
    Cipher    : DHE-RSA-AES256-SHA
    Session-ID: 
    Session-ID-ctx: 
    Master-Key: 95E3A2845A9D1F22AC9E4974A964E0887CCCBD7DBB6233D51EB3D70F815AF5E9AAB7A7AFEA7D8C662B2AC8F09939E3AC
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1413452965
    Timeout   : 7200 (sec)
    Verify return code: 20 (unable to get local issuer certificate)
---
250 HELP