$ openssl s_client -ssl3 -connect email.t-online.de:443 CONNECTED(00000003) depth=2 C = DE, O = T-Systems Enterprise Services GmbH, OU = T-Systems Trust Center, CN = T-TeleSec GlobalRoot Class 3 verify error:num=19:self signed certificate in certificate chain verify return:0 --- Certificate chain 0 s:/1.3.6.1.4.1.311.60.2.1.3=DE/businessCategory=V1.0, Clause 5.(b)/serialNumber=6794/1.3.6.1.4.1.311.60.2.1.1=Bonn/C=DE/ST=Hessen/L=Darmstadt/O=Deutsche Telekom AG/OU=P&I AM/DCS/CN=email.t-online.de i:/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass Extended Validation Class 3 CA 1 s:/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass Extended Validation Class 3 CA i:/C=DE/O=T-Systems Enterprise Services GmbH/OU=T-Systems Trust Center/CN=T-TeleSec GlobalRoot Class 3 2 s:/C=DE/O=T-Systems Enterprise Services GmbH/OU=T-Systems Trust Center/CN=T-TeleSec GlobalRoot Class 3 i:/C=DE/O=T-Systems Enterprise Services GmbH/OU=T-Systems Trust Center/CN=T-TeleSec GlobalRoot Class 3 --- Server certificate -----BEGIN CERTIFICATE----- MIIH4TCCBsmgAwIBAgIJAPjSsb53+HTVMA0GCSqGSIb3DQEBCwUAMIHzMQswCQYD VQQGEwJERTElMCMGA1UECgwcVC1TeXN0ZW1zIEludGVybmF0aW9uYWwgR21iSDEf MB0GA1UECwwWVC1TeXN0ZW1zIFRydXN0IENlbnRlcjEcMBoGA1UECAwTTm9yZHJo ZWluIFdlc3RmYWxlbjEOMAwGA1UEEQwFNTcyNTAxEDAOBgNVBAcMB05ldHBoZW4x IDAeBgNVBAkMF1VudGVyZSBJbmR1c3RyaWVzdHIuIDIwMTowOAYDVQQDDDFUZWxl U2VjIFNlcnZlclBhc3MgRXh0ZW5kZWQgVmFsaWRhdGlvbiBDbGFzcyAzIENBMB4X DTE0MDMyODEzMzQxMVoXDTE1MDMyODIzNTk1OVowgdkxEzARBgsrBgEEAYI3PAIB AwwCREUxGzAZBgNVBA8MElYxLjAsIENsYXVzZSA1LihiKTENMAsGA1UEBRMENjc5 NDEVMBMGCysGAQQBgjc8AgEBDARCb25uMQswCQYDVQQGEwJERTEPMA0GA1UECAwG SGVzc2VuMRIwEAYDVQQHDAlEYXJtc3RhZHQxHDAaBgNVBAoME0RldXRzY2hlIFRl bGVrb20gQUcxEzARBgNVBAsMClAmSSBBTS9EQ1MxGjAYBgNVBAMMEWVtYWlsLnQt b25saW5lLmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c2rgu9+ XJdJBG9UdVlSN5toDm/fi4Q84FOoXzFijKiCw67rRLT5eQokAmI3JiO4I5zt3lGC KIAOHsT/5p7PFFiZjbmtBXaNxQLIXv4R4Krw3e/2zKxiTdXym9HUqBV/ZO3jPa9L 46iExiWRgLKs+wTjNoXaiilIxd3U91pzUnPdr2QoywuO7ihbEw04ni12DMz24hqY NJFhWc52OTvp/WkvKlo7gGDNTFOe3PNwNCtkxRYEja85P5jZDR6cUcD069fW1t+h 1bMsISnMjFz2tf5Zf15w/vwou/+DNJO/HXfgKsN2gBOKIOAS/Fb16egRNq3POLyO Fdd58Ywk2Mg16QIDAQABo4IDjjCCA4owHwYDVR0jBBgwFoAUMCzVT9II0T3jp4KS gjeJbWa5D68wHQYDVR0OBBYEFFVHH+kmDCsZqbaJD9/Wi8SW8XS4MA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwUAYDVR0gBEkw RzBFBgorBgEEAb1HDRgBMDcwNQYIKwYBBQUHAgEWKWh0dHA6Ly93d3cudGVsZXNl Yy5kZS9zZXJ2ZXJwYXNzL2Nwcy5odG1sMIIBIAYDVR0fBIIBFzCCARMwQ6BBoD+G PWh0dHA6Ly9jcmwuc2VydmVycGFzcy50ZWxlc2VjLmRlL3JsL1NlcnZlclBhc3Nf RVZfQ2xhc3NfMy5jcmwwgcuggciggcWGgcJsZGFwOi8vbGRhcC5zZXJ2ZXJwYXNz LnRlbGVzZWMuZGUvQ049VGVsZVNlYyUyMFNlcnZlclBhc3MlMjBFeHRlbmRlZCUy MFZhbGlkYXRpb24lMjBDbGFzcyUyMDMlMjBDQSxPVT1ULVN5c3RlbXMlMjBUcnVz dCUyMENlbnRlcixPPVQtU3lzdGVtcyUyMEludGVybmF0aW9uYWwlMjBHbWJILEM9 REU/Q2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDCCAXUGCCsGAQUFBwEBBIIBZzCC AWMwMwYIKwYBBQUHMAGGJ2h0dHA6Ly9vY3NwLnNlcnZlcnBhc3MudGVsZXNlYy5k ZS9vY3NwcjBmBggrBgEFBQcwAoZaaHR0cDovL2NybC5zZXJ2ZXJwYXNzLnRlbGVz ZWMuZGUvY3J0L1RlbGVTZWNfU2VydmVyUGFzc19FeHRlbmRlZF9WYWxpZGF0aW9u X0NsYXNzXzNfQ0EuY2VyMIHDBggrBgEFBQcwAoaBtmxkYXA6Ly9sZGFwLnNlcnZl cnBhc3MudGVsZXNlYy5kZS9DTj1UZWxlU2VjJTIwU2VydmVyUGFzcyUyMEV4dGVu ZGVkJTIwVmFsaWRhdGlvbiUyMENsYXNzJTIwMyUyMENBLE9VPVQtU3lzdGVtcyUy MFRydXN0JTIwQ2VudGVyLE89VC1TeXN0ZW1zJTIwSW50ZXJuYXRpb25hbCUyMEdt YkgsQz1ERT9jQUNlcnRpZmljYXRlMAwGA1UdEwEB/wQCMAAwHAYDVR0RBBUwE4IR ZW1haWwudC1vbmxpbmUuZGUwDQYJKoZIhvcNAQELBQADggEBAMNpWzZoX+r0deo7 dcoebLmEwUF0/YwjlhMeZjfkAbT+lol5MlOBGPugB7NtgyOjZRrO18LZjWxyIZQx gaoW6XEu2qmXr8KI/WNrNtJW1k8VHpBkWMfh83cbpwyydpwRO+EXtWzhXnU50o6s eeEBkwQ/U5dL53l7jERQMOupW1M7bSS4tDDEv7xX3qht+qqOBJAHKSw0KnF/rl4r omA6iNkfUk9lV8Hck2IB0UkuAKmxKGdrT1UC+832/tuMKvV/tUaMj0D5qd7z4pL+ yEwtuhXOuAE6xVafBNuC8qN5vbdvp3gfboVGfokEsskmrn0oABUEyPCSkbn9SEp3 vrEvY7o= -----END CERTIFICATE----- subject=/1.3.6.1.4.1.311.60.2.1.3=DE/businessCategory=V1.0, Clause 5.(b)/serialNumber=6794/1.3.6.1.4.1.311.60.2.1.1=Bonn/C=DE/ST=Hessen/L=Darmstadt/O=Deutsche Telekom AG/OU=P&I AM/DCS/CN=email.t-online.de issuer=/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass Extended Validation Class 3 CA --- No client certificate CA names sent --- SSL handshake has read 4996 bytes and written 288 bytes --- New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-SHA Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE SSL-Session: Protocol : SSLv3 Cipher : ECDHE-RSA-AES128-SHA Session-ID: 218A752312D220368AFF9CBFCC1F5B272F91A6C0FB15FDFD0DBA2EED7F07CC94 Session-ID-ctx: Master-Key: 1F745AECB372DEE9832810C3DB38AE50B5DD67F341B942D7DADF960BF268BB958A56B11C36C36A7C7F70857F1FD17350 Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None Start Time: 1413453736 Timeout : 7200 (sec) Verify return code: 19 (self signed certificate in certificate chain) ---