$ openssl s_client -crlf -ssl3 -connect imap.arcor.de:993
CONNECTED(00000003)
depth=3 C = ZA, ST = Western Cape, L = Cape Town, O = Thawte Consulting cc, OU = Certification Services Division, CN = Thawte Premium Server CA, emailAddress = premium-server@thawte.com
verify error:num=19:self signed certificate in certificate chain
verify return:0
---
Certificate chain
 0 s:/C=DE/ST=NRW/L=Duesseldorf/O=Vodafone D2 GmbH/CN=imap.arcor.de
   i:/C=US/O=Thawte, Inc./CN=Thawte SSL CA
 1 s:/C=US/O=Thawte, Inc./CN=Thawte SSL CA
   i:/C=US/O=thawte, Inc./OU=Certification Services Division/OU=(c) 2006 thawte, Inc. - For authorized use only/CN=thawte Primary Root CA
 2 s:/C=US/O=thawte, Inc./OU=Certification Services Division/OU=(c) 2006 thawte, Inc. - For authorized use only/CN=thawte Primary Root CA
   i:/C=ZA/ST=Western Cape/L=Cape Town/O=Thawte Consulting cc/OU=Certification Services Division/CN=Thawte Premium Server CA/emailAddress=premium-server@thawte.com
 3 s:/C=ZA/ST=Western Cape/L=Cape Town/O=Thawte Consulting cc/OU=Certification Services Division/CN=Thawte Premium Server CA/emailAddress=premium-server@thawte.com
   i:/C=ZA/ST=Western Cape/L=Cape Town/O=Thawte Consulting cc/OU=Certification Services Division/CN=Thawte Premium Server CA/emailAddress=premium-server@thawte.com
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=DE/ST=NRW/L=Duesseldorf/O=Vodafone D2 GmbH/CN=imap.arcor.de
issuer=/C=US/O=Thawte, Inc./CN=Thawte SSL CA
---
No client certificate CA names sent
---
SSL handshake has read 4213 bytes and written 478 bytes
---
New, TLSv1/SSLv3, Cipher is AES256-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : SSLv3
    Cipher    : AES256-SHA
    Session-ID: A63931425D70B465692FF4D51E3BFEF1B352AC5F5D3A47C9F7EFDEE9A56B8832
    Session-ID-ctx: 
    Master-Key: 971B2BC43C9692D5901547E1F63DE44CCCFE58E1F9EEE2A2AD8EF00F31B80EF31B9C85BC1D7F5A4EBE24997A478AEF8D
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1413453148
    Timeout   : 7200 (sec)
    Verify return code: 19 (self signed certificate in certificate chain)
---
* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE AUTH=PLAIN ACL ACL2=UNION] Courier-IMAP ready. Copyright 1998-2010 Double Precision, Inc.  See COPYING for distribution information.