gistfile1.txt

openssl s_client -showcerts -CApath /opt/local/etc/openssl/certs/ -connect ftp.netbsd.org:443
CONNECTED(00000004)
depth=0 OU = GT34707538, OU = See www.rapidssl.com/resources/cps (c)15, OU = Domain Control Validated - RapidSSL(R), CN = *.netbsd.org
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 OU = GT34707538, OU = See www.rapidssl.com/resources/cps (c)15, OU = Domain Control Validated - RapidSSL(R), CN = *.netbsd.org
verify error:num=27:certificate not trusted
verify return:1
depth=0 OU = GT34707538, OU = See www.rapidssl.com/resources/cps (c)15, OU = Domain Control Validated - RapidSSL(R), CN = *.netbsd.org
verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
 0 s:/OU=GT34707538/OU=See www.rapidssl.com/resources/cps (c)15/OU=Domain Control Validated - RapidSSL(R)/CN=*.netbsd.org
   i:/C=US/O=GeoTrust Inc./CN=RapidSSL SHA256 CA - G4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=/OU=GT34707538/OU=See www.rapidssl.com/resources/cps (c)15/OU=Domain Control Validated - RapidSSL(R)/CN=*.netbsd.org
issuer=/C=US/O=GeoTrust Inc./CN=RapidSSL SHA256 CA - G4
---
No client certificate CA names sent
---
SSL handshake has read 1507 bytes and written 607 bytes
---
New, TLSv1/SSLv3, Cipher is AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : AES256-GCM-SHA384
    Session-ID: 256961E4B04994CFCD956F99FB22F737F057533A4893B257BB2E4325346E298F
    Session-ID-ctx:
    Master-Key: F77BE01775A44931C239281346F896D9E0B16F8558FEDF4F71AF7DF6F4B488838748A062B32F6EAF0F749AB4A18A50AE
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - ec 1b e0 03 eb 85 22 2e-d3 7f 7c 9c 4d d6 f7 2d   ......"...|.M..-
    0010 - 58 c8 fb 0b c8 b7 32 8f-ea eb cd 0f 49 4f c8 9a   X.....2.....IO..
    0020 - 6e 07 5a 80 4d 5c 40 fa-5d ab 91 12 2b 9a 78 21   n.Z.M\@.]...+.x!
    0030 - fe 2f a2 8d 25 f5 d6 a0-7d fa 9f b6 98 e4 fe 13   ./..%...}.......
    0040 - a8 63 7b db 0b 24 38 f2-c7 9e 9f a7 c5 16 52 09   .c{..$8.......R.
    0050 - c8 98 cc 5f 4d 88 eb 96-71 4f 9c f0 64 6c b4 12   ..._M...qO..dl..
    0060 - 9c ee f1 14 dd 25 13 91-38 d7 74 60 7b f0 89 d4   .....%..8.t`{...
    0070 - 43 44 68 80 b0 ff 96 c6-aa ff 4f 91 30 c0 d7 8f   CDh.......O.0...
    0080 - d4 13 25 76 d9 66 67 77-8d 9a d2 61 d1 b4 9a 8b   ..%v.fgw...a....
    0090 - 5d 60 0a b5 2f e0 84 38-c7 35 2b 99 86 d7 27 6f   ]`../..8.5+...'o

    Start Time: 1469187051
    Timeout   : 300 (sec)
    Verify return code: 21 (unable to verify the first certificate)
---