$ openssl s_client -ssl3 -connect arcor.de:443 CONNECTED(00000003) depth=2 C = US, O = "thawte, Inc.", OU = Certification Services Division, OU = "(c) 2006 thawte, Inc. - For authorized use only", CN = thawte Primary Root CA verify error:num=20:unable to get local issuer certificate verify return:0 --- Certificate chain 0 s:/C=DE/ST=NRW/L=Duesseldorf/O=Vodafone D2 GmbH/CN=www.arcor.de i:/C=US/O=Thawte, Inc./CN=Thawte SSL CA 1 s:/C=US/O=Thawte, Inc./CN=Thawte SSL CA i:/C=US/O=thawte, Inc./OU=Certification Services Division/OU=(c) 2006 thawte, Inc. - For authorized use only/CN=thawte Primary Root CA 2 s:/C=US/O=thawte, Inc./OU=Certification Services Division/OU=(c) 2006 thawte, Inc. - For authorized use only/CN=thawte Primary Root CA i:/C=ZA/ST=Western Cape/L=Cape Town/O=Thawte Consulting cc/OU=Certification Services Division/CN=Thawte Premium Server CA/emailAddress=premium-server@thawte.com --- Server certificate -----BEGIN CERTIFICATE----- MIIDyjCCArKgAwIBAgIQUZVB1EJbO799MFfwZ/EdRTANBgkqhkiG9w0BAQUFADA8 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMVGhhd3RlLCBJbmMuMRYwFAYDVQQDEw1U aGF3dGUgU1NMIENBMB4XDTExMDkyNjAwMDAwMFoXDTE1MDkyNTIzNTk1OVowYzEL MAkGA1UEBhMCREUxDDAKBgNVBAgTA05SVzEUMBIGA1UEBxQLRHVlc3NlbGRvcmYx GTAXBgNVBAoUEFZvZGFmb25lIEQyIEdtYkgxFTATBgNVBAMUDHd3dy5hcmNvci5k ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMbSBsvcwM7ZH32WKCD5 NDqmAih+AQTXCKKyTNFrggskRWlew+6Dc5PerY7Y8aM+A8oPs4KAk0fKi2uLiuL9 ri7lVxQ5miM0C481D+2PgZ17t+luoJlxNyc6gQ9OB1lV7hLGQiSnzXFKsDPP8UNC 9CRExA5f0liNNLFzx/67oA/IgMIJV2HsLWSeHlVH428eu4yfBtpgigQOPRqatLPz px8ZlP3JPdx6PRPAQz9cNRPKdLWcJ9z2AoYL6xw1D7Im6setWNwvKm6Gcx3dYzqN zK16zrctwCMBmqxs2yU5Ij98wiFegdbKcnRLw5H2E0rjH6H+sIV2NguFj9ZBt/kU LM8CAwEAAaOBoDCBnTAMBgNVHRMBAf8EAjAAMDoGA1UdHwQzMDEwL6AtoCuGKWh0 dHA6Ly9zdnItb3YtY3JsLnRoYXd0ZS5jb20vVGhhd3RlT1YuY3JsMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAyBggrBgEFBQcBAQQmMCQwIgYIKwYBBQUH MAGGFmh0dHA6Ly9vY3NwLnRoYXd0ZS5jb20wDQYJKoZIhvcNAQEFBQADggEBAFyQ RpCzgyx4NQIGRtVrt6m5ghy2F8PS0JJJ45LZpkTftOulX2elqtofv9/n1YsL5nTH qhalzFLBzFItK/XU8B/GG7A5nqWVjOztdp+jOchK7QS+Q1MmCOgs4/CmPTC8UVAE yFJ7oYszclbfQF4CYYUHZJiff5YOjS8qpL8kTwtBuLO+ayJEPJUK/mtMfaxK6Iy9 3QCIgp//FL4cDGAp2OPRr0SkNkBYcQQEkMLmETyF+ZXHy8ia1vo+MiFIYHkYLXEX fS6ie+Iw3R4sDgbUqXqFCEnbh4jLEzMwfY5/VmlUOzoI7+AAR5m2CqJxMR23ad2N wI7KTQQAgOncCIMG8Xk= -----END CERTIFICATE----- subject=/C=DE/ST=NRW/L=Duesseldorf/O=Vodafone D2 GmbH/CN=www.arcor.de issuer=/C=US/O=Thawte, Inc./CN=Thawte SSL CA --- No client certificate CA names sent --- SSL handshake has read 3398 bytes and written 478 bytes --- New, TLSv1/SSLv3, Cipher is AES256-SHA Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE SSL-Session: Protocol : SSLv3 Cipher : AES256-SHA Session-ID: 9D51D0F8E84E7ED71CC70027742AAFC90EA0EEAAFE78E902A8739E61D104F7E7 Session-ID-ctx: Master-Key: 918BF2184E4F69044C2578025AC776121DA7F719704A1ABD5765A579415AABE1CDBA3130E463773826819679B11BA38E Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None Start Time: 1413453673 Timeout : 7200 (sec) Verify return code: 20 (unable to get local issuer certificate) ---