gistfile1.txt

$ openssl s_client -connect 127.0.0.1:465 -starttls smtp
CONNECTED(00000003)
depth=0 CN = zhillb.xyz
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 CN = zhillb.xyz
verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
 0 s:/CN=zhillb.xyz
   i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/CN=zhillb.xyz
issuer=/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
---
No client certificate CA names sent
Peer signing digest: SHA512
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 2147 bytes and written 466 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: 8FA727F942E501FFF5FBEB9FFD3E61A5D4D1C306444A47113CD279F330287AA3
    Session-ID-ctx: 
    Master-Key: 2DE1C6000CF010F1039656F972312171B712A97D123EF0367FC2A927735BE150E8450991F7E9C0583154126D56ECA5FF
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 7200 (seconds)
    TLS session ticket:
    0000 - 68 c2 be 52 50 c1 de 7a-6b 62 fc de 98 55 18 6c   h..RP..zkb...U.l
    0010 - 46 a4 e7 fd 88 13 b4 27-05 a2 a9 91 00 e2 6f bc   F......'......o.
    0020 - ff 3c 96 eb 83 23 b2 76-58 02 06 91 00 d2 d8 15   .<...#.vX.......
    0030 - 11 b1 1b 0b 17 f1 ca ce-81 c0 c5 d6 e4 3c 0b c6   .............<..
    0040 - 0f 51 80 05 51 a5 7a 72-84 c9 06 23 75 97 4d 50   .Q..Q.zr...#u.MP
    0050 - 94 f8 38 31 1b e6 36 93-af 81 f8 90 11 7a e5 d2   ..81..6......z..
    0060 - 68 cb 97 df c4 d3 9c 15-55 6c 59 01 05 b7 75 c9   h.......UlY...u.
    0070 - 44 bc 34 21 c4 40 6d e3-2d b9 7c 25 e3 c2 c3 f9   [email protected].|%....
    0080 - 6b 34 88 e8 62 36 c9 ca-03 0c 4a 93 78 9d 47 0c   k4..b6....J.x.G.
    0090 - 1e 84 fb b2 2c 13 31 df-37 5c f0 fb b8 ab 27 4d   ....,.1.7\....'M

    Start Time: 1497509033
    Timeout   : 300 (sec)
    Verify return code: 21 (unable to verify the first certificate)
---
250 DSN