C:\OpenVPN\bin>openssl s_client -connect pop.gmail.com:995
CONNECTED(00000130)
depth=2 C = US, O = Google Trust Services LLC, CN = GTS Root R1
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=1 C = US, O = Google Trust Services LLC, CN = GTS CA 1C3
verify return:1
depth=0 CN = pop.gmail.com
verify return:1
---
Certificate chain
0 s:CN = pop.gmail.com
i:C = US, O = Google Trust Services LLC, CN = GTS CA 1C3
1 s:C = US, O = Google Trust Services LLC, CN = GTS CA 1C3
i:C = US, O = Google Trust Services LLC, CN = GTS Root R1
2 s:C = US, O = Google Trust Services LLC, CN = GTS Root R1
i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIEhTCCA22gAwIBAgIQMtjXo+s2gLgKAAAAASJNuDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFDMzAeFw0yMTExMDgwMzExMjJaFw0yMjAxMzEw
MzExMjFaMBgxFjAUBgNVBAMTDXBvcC5nbWFpbC5jb20wWTATBgcqhkjOPQIBBggq
hkjOPQMBBwNCAASzUui5/Q4LY+3yJCKqBUj73/8CJZyEkDek1hSQh9/dwSR10nhk
Jdhe+qZ24Ka5S/1Dz9aozAE5TORnGkaxWe9Ko4ICZjCCAmIwDgYDVR0PAQH/BAQD
AgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FJUFksXXel91yYDC1tDDKngOprpfMB8GA1UdIwQYMBaAFIp0f6+Fze6VzT2c0OJG
FPNxNR0nMGoGCCsGAQUFBwEBBF4wXDAnBggrBgEFBQcwAYYbaHR0cDovL29jc3Au
cGtpLmdvb2cvZ3RzMWMzMDEGCCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVw
by9jZXJ0cy9ndHMxYzMuZGVyMBgGA1UdEQQRMA+CDXBvcC5nbWFpbC5jb20wIQYD
VR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6At
hitodHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxYzMvemRBVHQwRXhfRmsuY3JsMIIB
BAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYARqVV63X6kSAwtaKJafTzfREsQXS+/Um4
havy/HD+bUcAAAF8/b5fjQAABAMARzBFAiEA4YgverXm9DyRtiD1DDVXaRf+S25c
CTepn0u6zTQkkUcCICTFfrfxdc66/vTjvmT9uti+14QaWchuX3ZWMyH3yUPFAHYA
QcjKsd8iRkoQxqE6CUKHXk4xixsD6+tLx2jwkGKWBvYAAAF8/b5dqwAABAMARzBF
AiANIx6qT7TDfBwhwCKgimbdRPl/Bz6APoQ7B3XYuAU53gIhAJbhv7lu4hC7NK08
R0MMSvehGJk7MMEq5luKT0YMDu3lMA0GCSqGSIb3DQEBCwUAA4IBAQCYq0rIcUtb
zbb1d8vjtxFFenMCdsmxr7Y1TCl4MiKRBOmiB7DaeOF/yvHlT5YDsBPFu1Jqi9He
Xmo30b2tjsCS0djlbKKvryNbFl7nALMuQwQJeMcxsXB5JY6CD3Pa8m8CZy/Y7sqj
ZBSK0IMMocjXZWn+5b5c60an4z9FR8Vsi5i5IEbvSn4WgEdt448D3pOQkHGpnIXH
bISPKZDZ3iLBu7qt4k5Q6SxVJSKeExMmr4azJRjQqqcCB0PN2+nAvM8LRsbQht1d
5j0VBMASEgfQ9PP4+aT1wHj+SazeaVOA/WXAnT8k8xbD2Zcii58/7uY4mrxEXfVs
bPld67udnUpu
-----END CERTIFICATE-----
subject=CN = pop.gmail.com
issuer=C = US, O = Google Trust Services LLC, CN = GTS CA 1C3
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: ECDSA
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 4292 bytes and written 395 bytes
Verification error: unable to get local issuer certificate
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 256 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 20 (unable to get local issuer certificate)
---
--- |
