$ openssl s_client -starttls smtp -crlf -ssl3 -connect mx.freenet.de:587
CONNECTED(00000003)
depth=2 C = DE, O = Deutsche Telekom AG, OU = T-TeleSec Trust Center, CN = Deutsche Telekom Root CA 2
verify error:num=19:self signed certificate in certificate chain
verify return:0
---
Certificate chain
0 s:/C=DE/O=freenet.de GmbH/ST=Hamburg/L=Hamburg/emailAddress=abuse@freenet.de/CN=*.freenet.de
i:/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2
1 s:/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2
i:/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2
2 s:/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2
i:/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=DE/O=freenet.de GmbH/ST=Hamburg/L=Hamburg/emailAddress=abuse@freenet.de/CN=*.freenet.de
issuer=/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2
---
Acceptable client certificate CA names
/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2
/C=DE/O=T-Systems Enterprise Services GmbH/OU=T-Systems Trust Center/CN=T-TeleSec GlobalRoot Class 2
/C=DE/O=T-Systems Enterprise Services GmbH/OU=T-Systems Trust Center/CN=T-TeleSec GlobalRoot Class 3
---
SSL handshake has read 6386 bytes and written 522 bytes
---
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : SSLv3
Cipher : DHE-RSA-AES256-SHA
Session-ID: 1FE16349913BA2193703170EA686397224BCD0DA5885B27224AB601D3E8D08BB
Session-ID-ctx:
Master-Key: 9D7A58692075CB2BD82E354DE037E4619FEF7B4042A8197857FAA0624586FDE4AD05B59892ED747DBA6D24EBFE4EA751
Key-Arg : None
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1413452711
Timeout : 7200 (sec)
Verify return code: 19 (self signed certificate in certificate chain)
---
250 HELP