$ openssl s_client -starttls smtp -crlf -ssl3 -connect smtp.mail.me.com:587 CONNECTED(00000003) depth=2 C = US, O = "VeriSign, Inc.", OU = VeriSign Trust Network, OU = "(c) 2006 VeriSign, Inc. - For authorized use only", CN = VeriSign Class 3 Public Primary Certification Authority - G5 verify error:num=20:unable to get local issuer certificate verify return:0 --- Certificate chain 0 s:/C=US/ST=California/L=Cupertino/O=Apple Inc./CN=*.mail.me.com i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3 1 s:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3 i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5 2 s:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5 i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority --- Server certificate -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIQPXnz23AcGX+rnqqyEhSP/zANBgkqhkiG9w0BAQUFADCB tTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDEvMC0GA1UEAxMm VmVyaVNpZ24gQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzMwHhcNMTQwNDEy MDAwMDAwWhcNMTUwNDEyMjM1OTU5WjBjMQswCQYDVQQGEwJVUzETMBEGA1UECBMK Q2FsaWZvcm5pYTESMBAGA1UEBxQJQ3VwZXJ0aW5vMRMwEQYDVQQKFApBcHBsZSBJ bmMuMRYwFAYDVQQDFA0qLm1haWwubWUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAlTYHyBMUExk4ibsdOlIREHt45RhS27CUC4LbQPkBbz7e7P/N ml9mau5aMMOcAFKa8UNqJQdeQQAefvkMrlVTeLoCHLYLxy0qdK7AL0mqHMR4A8kZ mUWwro7CGySbJLDb6zUkRawFtjK/c1gKhWVP0uy09Q6WQeOkluCS6pxkQ+j7MB0x tFTfabGb6jh5Nw10bp1N4/CM+Hwriv7r8Wy3ox+WEmW/gdpliBtAg/gMiDlVRu9v mj1y0FT7MHU9ARteRP4XtsIzcXDj2C+5uJhYPlBTbWHvbwYzAmmz/CjMc+MJSm5s pOuyiBvgNhYxm2xxnUcRih5R+m3IsALIUDzAtwIDAQABo4IBZjCCAWIwGAYDVR0R BBEwD4INKi5tYWlsLm1lLmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwZQYDVR0gBF4wXDBaBgpghkgB hvhFAQc2MEwwIwYIKwYBBQUHAgEWF2h0dHBzOi8vZC5zeW1jYi5jb20vY3BzMCUG CCsGAQUFBwICMBkaF2h0dHBzOi8vZC5zeW1jYi5jb20vcnBhMB8GA1UdIwQYMBaA FA1EXBZTRMGCfh0gqyX0AWPYvnmlMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9z ZC5zeW1jYi5jb20vc2QuY3JsMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYT aHR0cDovL3NkLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3NkLnN5bWNi LmNvbS9zZC5jcnQwDQYJKoZIhvcNAQEFBQADggEBADEExuCzjE/z7jAqYbX+ghyA 3HUNH+JJWglEN5AF/M7r5RF+0LLJfxYBTMFM+APp5jD2qsPbyKJ2/t+Qfv6w0JF6 0Pfh8IC78LnhpGjG9++XdNs+bxV7OYkWFXvFPdc1BFOgEB6VEziIZsaM9ZwMaCon FI96WN6lrZ7GnbAj2tChzGasJN0XP3HX3181xvHA3aJCsjrDff0FbP8EDWxzG7mo Oe8VeA63hBPDdqYhFm6HNOEsKzpYzZCpj6Jd96VQXW5ICsGTPk15IAu0kCo92Nli 5qKepbq5Xhz+jbQ1NF9CzIIRK32ZC36GspWmA9GFdZOqcqwH/hWc0Yz9pb50bq4= -----END CERTIFICATE----- subject=/C=US/ST=California/L=Cupertino/O=Apple Inc./CN=*.mail.me.com issuer=/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3 --- No client certificate CA names sent --- SSL handshake has read 4729 bytes and written 505 bytes --- New, TLSv1/SSLv3, Cipher is RC4-MD5 Server public key is 2048 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE SSL-Session: Protocol : SSLv3 Cipher : RC4-MD5 Session-ID: 5BAC895BBA1E46495426BAAA7C7567B5D369508F51FDF7848ECB4BC8157F4F7D Session-ID-ctx: Master-Key: 0CC3621C5B151368D04332EC77BDE23159FA0D517EE213ABEF196B9AF2651D61688393904929410AA504DDE292ED4AE3 Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None Start Time: 1413453022 Timeout : 7200 (sec) Verify return code: 20 (unable to get local issuer certificate) --- 250 SIZE 28311552