C:\OpenVPN\bin>openssl s_client -connect pop.gmail.com:995 CONNECTED(00000130) depth=2 C = US, O = Google Trust Services LLC, CN = GTS Root R1 verify error:num=20:unable to get local issuer certificate verify return:1 depth=1 C = US, O = Google Trust Services LLC, CN = GTS CA 1C3 verify return:1 depth=0 CN = pop.gmail.com verify return:1 --- Certificate chain 0 s:CN = pop.gmail.com i:C = US, O = Google Trust Services LLC, CN = GTS CA 1C3 1 s:C = US, O = Google Trust Services LLC, CN = GTS CA 1C3 i:C = US, O = Google Trust Services LLC, CN = GTS Root R1 2 s:C = US, O = Google Trust Services LLC, CN = GTS Root R1 i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA --- Server certificate -----BEGIN CERTIFICATE----- MIIEhTCCA22gAwIBAgIQMtjXo+s2gLgKAAAAASJNuDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFDMzAeFw0yMTExMDgwMzExMjJaFw0yMjAxMzEw MzExMjFaMBgxFjAUBgNVBAMTDXBvcC5nbWFpbC5jb20wWTATBgcqhkjOPQIBBggq hkjOPQMBBwNCAASzUui5/Q4LY+3yJCKqBUj73/8CJZyEkDek1hSQh9/dwSR10nhk Jdhe+qZ24Ka5S/1Dz9aozAE5TORnGkaxWe9Ko4ICZjCCAmIwDgYDVR0PAQH/BAQD AgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FJUFksXXel91yYDC1tDDKngOprpfMB8GA1UdIwQYMBaAFIp0f6+Fze6VzT2c0OJG FPNxNR0nMGoGCCsGAQUFBwEBBF4wXDAnBggrBgEFBQcwAYYbaHR0cDovL29jc3Au cGtpLmdvb2cvZ3RzMWMzMDEGCCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVw by9jZXJ0cy9ndHMxYzMuZGVyMBgGA1UdEQQRMA+CDXBvcC5nbWFpbC5jb20wIQYD VR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6At hitodHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxYzMvemRBVHQwRXhfRmsuY3JsMIIB BAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYARqVV63X6kSAwtaKJafTzfREsQXS+/Um4 havy/HD+bUcAAAF8/b5fjQAABAMARzBFAiEA4YgverXm9DyRtiD1DDVXaRf+S25c CTepn0u6zTQkkUcCICTFfrfxdc66/vTjvmT9uti+14QaWchuX3ZWMyH3yUPFAHYA QcjKsd8iRkoQxqE6CUKHXk4xixsD6+tLx2jwkGKWBvYAAAF8/b5dqwAABAMARzBF AiANIx6qT7TDfBwhwCKgimbdRPl/Bz6APoQ7B3XYuAU53gIhAJbhv7lu4hC7NK08 R0MMSvehGJk7MMEq5luKT0YMDu3lMA0GCSqGSIb3DQEBCwUAA4IBAQCYq0rIcUtb zbb1d8vjtxFFenMCdsmxr7Y1TCl4MiKRBOmiB7DaeOF/yvHlT5YDsBPFu1Jqi9He Xmo30b2tjsCS0djlbKKvryNbFl7nALMuQwQJeMcxsXB5JY6CD3Pa8m8CZy/Y7sqj ZBSK0IMMocjXZWn+5b5c60an4z9FR8Vsi5i5IEbvSn4WgEdt448D3pOQkHGpnIXH bISPKZDZ3iLBu7qt4k5Q6SxVJSKeExMmr4azJRjQqqcCB0PN2+nAvM8LRsbQht1d 5j0VBMASEgfQ9PP4+aT1wHj+SazeaVOA/WXAnT8k8xbD2Zcii58/7uY4mrxEXfVs bPld67udnUpu -----END CERTIFICATE----- subject=CN = pop.gmail.com issuer=C = US, O = Google Trust Services LLC, CN = GTS CA 1C3 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: ECDSA Server Temp Key: X25519, 253 bits --- SSL handshake has read 4292 bytes and written 395 bytes Verification error: unable to get local issuer certificate --- New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 256 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 20 (unable to get local issuer certificate) --- --- |