$ openssl s_client -crlf -ssl3 -connect secureimap.t-online.de:993
CONNECTED(00000003)
depth=2 C = DE, O = Deutsche Telekom AG, OU = T-TeleSec Trust Center, CN = Deutsche Telekom Root CA 2
verify error:num=19:self signed certificate in certificate chain
verify return:0
---
Certificate chain
 0 s:/C=DE/O=Deutsche Telekom AG/OU=P&I AM/DCS/ST=Hessen/L=Darmstadt/emailAddress=certadmin_pi@telekom.de/CN=secureimap.t-online.de
   i:/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2
 1 s:/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2
   i:/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2
 2 s:/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2
   i:/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=DE/O=Deutsche Telekom AG/OU=P&I AM/DCS/ST=Hessen/L=Darmstadt/emailAddress=certadmin_pi@telekom.de/CN=secureimap.t-online.de
issuer=/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2
---
No client certificate CA names sent
---
SSL handshake has read 5196 bytes and written 320 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : SSLv3
    Cipher    : ECDHE-RSA-AES256-SHA
    Session-ID: D6008EBB9E5BFD4EDAB4C4F82B83BE5BC87B89B22DEB719DEFE7784BC045A857
    Session-ID-ctx: 
    Master-Key: 40563AFEC7B6D9C31312A64745FC2DD9463B6BB9E9F72380B4AA77A81C4053FBC6C7A9EA89AB06BE95E3EF19FE595DD5
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1413453272
    Timeout   : 7200 (sec)
    Verify return code: 19 (self signed certificate in certificate chain)
---
* OK T-Online IMAP Proxy ready