1. $ openssl s_client -connect devico.uberspace.de:993
2. CONNECTED(00000003)
3. depth=2 C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
4. verify return:1
5. depth=1 C = BE, O = GlobalSign nv-sa, CN = AlphaSSL CA - SHA256 - G2
6. verify return:1
7. depth=0 OU = Domain Control Validated, CN = *.uberspace.de
8. verify error:num=10:certificate has expired
9. notAfter=Mar 14 21:00:03 2021 GMT
10. verify return:1
11. depth=0 OU = Domain Control Validated, CN = *.uberspace.de
12. notAfter=Mar 14 21:00:03 2021 GMT
13. verify return:1
14. ---
15. Certificate chain
16.  0 s:OU = Domain Control Validated, CN = *.uberspace.de
17.    i:C = BE, O = GlobalSign nv-sa, CN = AlphaSSL CA - SHA256 - G2
18.  1 s:C = BE, O = GlobalSign nv-sa, CN = AlphaSSL CA - SHA256 - G2
19.    i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
20. ---
21. Server certificate
22. -----BEGIN CERTIFICATE-----
23. MIIHXTCCBkWgAwIBAgIMYSXSfaYcXCekkdxbMA0GCSqGSIb3DQEBCwUAMEwxCzAJ
24. BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB
25. bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTE5MDIxMjEzMzkwMloXDTIxMDMx
26. NDIxMDAwM1owPDEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMRcw
27. FQYDVQQDDA4qLnViZXJzcGFjZS5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
28. AgoCggIBAMb0QY6q9SbjHvt8sGwKuVlgeHx6nBACZ8OqDuh6BMVWz0nJvOMR52rI
29. Rz0GiZoF3/XnC7tt9wEtA5Aer4SihjJFjI0ZpIe9cc8GfLiv/oF3BevhPfXYYLF2
30. 3fkCjpZOI/Vna7MjqfKO36GxeOsO/2FaM5tcBzrAj6yAEOPNRDmK8CshGZ2558+3
31. pi0BiSInAiMeWiyK/Tgfii0bgQG2+pzRvAOcZK2+2VAZw1WCycD3CirZZ7wT4I5F
32. mmwNxtnxlcwblxVdEibkLQf1kz3pVA06CzYBH3tsFOIA9FFthjsty73Jpm9+TRLf
33. SfeK385Y56dydyUUQ8/zNKLadZd5B0hZrrZfH8hQnJNbTgfjlbhCX8nD/4oKIUSy
34. a9eRYtb0rbyjWdSPCv90jc5oYcq7a5vUtRYdr4TU01jKWTYX1K+BUhJrN639Gn4P
35. U3EsSk1DFlovK3aBi+QQVPo3jjiVytYHQD9x7kY2yuq5uFyrcwsmy8YGkcIhEpj9
36. dsQz+4ag6lY6CrtI4CLcsTZlm7eYyZ707uFDnL1CU0wgOb5cY+rFwaLaWhwLxc/b
37. Lokf3ZqIk7w5dpRsl6spGswNHaFuDpwRs0OpQRctwlIrJVk+I/0egDyD4fHfSzan
38. S2/37s+Fz34VDAE5aL1xh19qk0+KIUgayuVzFjtpi5W1H1z28btnAgMBAAGjggNN
39. MIIDSTAOBgNVHQ8BAf8EBAMCBaAwgYkGCCsGAQUFBwEBBH0wezBCBggrBgEFBQcw
40. AoY2aHR0cDovL3NlY3VyZTIuYWxwaGFzc2wuY29tL2NhY2VydC9nc2FscGhhc2hh
41. MmcycjEuY3J0MDUGCCsGAQUFBzABhilodHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5j
42. b20vZ3NhbHBoYXNoYTJnMjBXBgNVHSAEUDBOMEIGCisGAQQBoDIBCgowNDAyBggr
43. BgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8w
44. CAYGZ4EMAQIBMAkGA1UdEwQCMAAwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2Ny
45. bDIuYWxwaGFzc2wuY29tL2dzL2dzYWxwaGFzaGEyZzIuY3JsMCcGA1UdEQQgMB6C
46. DioudWJlcnNwYWNlLmRlggx1YmVyc3BhY2UuZGUwHQYDVR0lBBYwFAYIKwYBBQUH
47. AwEGCCsGAQUFBwMCMB0GA1UdDgQWBBQw1R42MJrWwGfK6ReR05jvFxswwjAfBgNV
48. HSMEGDAWgBT1zdU8CFD5ak86t5faVoPmadJo9zCCAX0GCisGAQQB1nkCBAIEggFt
49. BIIBaQFnAHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFo4e61
50. 6wAABAMARzBFAiBLPoyvXznNxnnldAQqAeW2Aakan5qkuPOoN4d5BX2fIgIhAO0Q
51. KI4HmpPZNOErQ32N9iE20haV41mr/OQUBPA2o5dMAHYA7ku9t3XOYLrhQmkfq+Ge
52. ZqMPfl+wctiDAMR7iXqo/csAAAFo4e62RwAABAMARzBFAiEAmLzaaXHHFMGwgmYS
53. JuLIdBGQdMrz9yogcSPOQ1qAR9QCIA+AxgPt+3RueVO5YaiauHv6tMBJKo/TEE1t
54. NOyPQ6gFAHUAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFo4e62
55. wAAABAMARjBEAiAtM4HVdovqN3IGhznj1lEVcGqZZvPJsD+cF2nAndE72AIgJWkc
56. xsEUOBl257itx5Pn2e9Op+PqRMQMd/uS5wif680wDQYJKoZIhvcNAQELBQADggEB
57. AKsY73onnF/GyHP9CZ/Xzy2F74AVJ89/JdiVZ4JGsIqHs1H//r8QrYnpRgFENekK
58. Dk/IDeLmLJRBUF1j166nlqfpG+PqFrOkTl9xeV/puYzw9BbuzeP1b+b6INgW/Vpe
59. tqAglrsJB1a7p7XnCs2kZW5x/ChW4en3A70hhlVgE5rTPhZuN5UUnWj1ImYHz+/q
60. pDSnVs0HxsRNhSFW/Gs5oVMHbNKt0t6jGwyw0uFuzxDtms49HcqX2JJDrxFUj3pF
61. RSWzgmqKvqpbFy3L20lrPSrIaaQ3w7Ea2ZXgjJQddPZbdxcLvHiSepCwK2dTf1no
62. L1OZXrmuNf+/sQB+WDykPog=
63. -----END CERTIFICATE-----
64. subject=OU = Domain Control Validated, CN = *.uberspace.de
65.  
66. issuer=C = BE, O = GlobalSign nv-sa, CN = AlphaSSL CA - SHA256 - G2
67.  
68. ---
69. No client certificate CA names sent
70. Peer signing digest: SHA256
71. Peer signature type: RSA
72. Server Temp Key: ECDH, P-256, 256 bits
73. ---
74. SSL handshake has read 3927 bytes and written 447 bytes
75. Verification error: certificate has expired
76. ---
77. New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
78. Server public key is 4096 bit
79. Secure Renegotiation IS supported
80. Compression: NONE
81. Expansion: NONE
82. No ALPN negotiated
83. SSL-Session:
84.     Protocol  : TLSv1.2
85.     Cipher    : ECDHE-RSA-AES256-GCM-SHA384
86.     Session-ID: 1B6C1F1FA0146D9C5DF145922EEE4E375DC7E63CBE0715830B590D58A16866D7
87.     Session-ID-ctx:
88.     Master-Key: 675698389154BBBE797B4B71A94F73930D0030237568125106F283138D872359BED7ECFE7EACA781AEAF25606AC9DD43
89.     PSK identity: None
90.     PSK identity hint: None
91.     SRP username: None
92.     TLS session ticket lifetime hint: 300 (seconds)
93.     TLS session ticket:
94.     0000 - d5 96 61 3b 3e e9 18 9c-47 ed 3b aa d4 63 2d e2   ..a;>...G.;..c-.
95.     0010 - 55 5e 9c a3 58 f2 92 2c-6c d7 b1 99 16 f3 a1 3d   U^..X..,l......=
96.     0020 - 71 95 01 9a a1 68 f8 e8-65 80 27 37 22 b7 1f 48   q....h..e.'7"..H
97.     0030 - 7c 99 64 68 28 1b d8 e8-af 66 03 60 fd d4 9c a1   |.dh(....f.`....
98.     0040 - 8f bd a7 3b 75 1e 02 74-a9 81 01 69 c8 32 42 51   ...;u..t...i.2BQ
99.     0050 - b8 97 4d cb d2 71 b4 5f-e6 4d 75 25 7d ff 6d 60   ..M..q._.Mu%}.m`
100.     0060 - b1 34 91 0e ad bb fd 01-32 e8 6f 59 16 c9 9a 3f   .4......2.oY...?
101.     0070 - 8a 6c ff 4a f7 25 ad 19-0b d0 fa 7a 1e 9c 2c f0   .l.J.%.....z..,.
102.     0080 - fb 0e 8d 26 8a 9b 15 ad-2d f1 da ab 57 40 53 82   ...&....-...W@S.
103.     0090 - d7 4e fa 0e 1e 0e 5f 9b-df 81 7e 92 98 73 bf ca   .N...._...~..s..
104.     00a0 - 24 f8 a1 32 39 30 8d 8c-0e 21 1e e3 42 06 ca 0a   $..290...!..B...
105.  
106.     Start Time: 1615757504
107.     Timeout   : 7200 (sec)
108.     Verify return code: 10 (certificate has expired)
109.     Extended master secret: no
110. ---
111. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SPECIAL-USE AUTH=PLAIN] Dovecot ready.