$ openssl s_client -starttls smtp -crlf -ssl3 -connect securesmtp.t-online.de:587
CONNECTED(00000003)
depth=2 C = DE, O = Deutsche Telekom AG, OU = T-TeleSec Trust Center, CN = Deutsche Telekom Root CA 2
verify error:num=19:self signed certificate in certificate chain
verify return:0
---
Certificate chain
 0 s:/C=DE/O=Deutsche Telekom AG/OU=P&I AM/DCS/ST=Hessen/L=Darmstadt/emailAddress=certadmin_pi@telekom.de/CN=securesmtp.t-online.de
   i:/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2
 1 s:/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2
   i:/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2
 2 s:/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2
   i:/C=DE/O=Deutsche Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2
---
Server certificate
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
subject=/C=DE/O=Deutsche Telekom AG/OU=P&I AM/DCS/ST=Hessen/L=Darmstadt/emailAddress=certadmin_pi@telekom.de/CN=securesmtp.t-online.de
issuer=/C=DE/O=T-Systems International GmbH/OU=T-Systems Trust Center/ST=Nordrhein Westfalen/postalCode=57250/L=Netphen/street=Untere Industriestr. 20/CN=TeleSec ServerPass DE-2
---
No client certificate CA names sent
---
SSL handshake has read 5528 bytes and written 355 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : SSLv3
    Cipher    : ECDHE-RSA-AES256-SHA
    Session-ID: D886435333FD5E25EA2B6AF5AE48D29D1BBABDB538DACFFC211BA650B2C33CBD
    Session-ID-ctx: 
    Master-Key: 73E4ADAE81D03CEEBFAB1D4D8A1F90FD36D0DE4874D645E8318442F3153782AFD6E078E9D6C62FB8D424D377158BFD1E
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1413453006
    Timeout   : 7200 (sec)
    Verify return code: 19 (self signed certificate in certificate chain)
---
250 HELP