openssl s_client -host online.sberbank.ru -port 443
CONNECTED(00000003)
depth=2 C = US, O = "thawte, Inc.", OU = Certification Services Division, OU = "(c) 2006 thawte, Inc. - For authorized use only", CN = thawte Primary Root CA
verify return:1
depth=1 C = US, O = "thawte, Inc.", CN = thawte EV SSL CA - G3
verify return:1
depth=0 jurisdictionC = RU, businessCategory = Private Organization, serialNumber = 1027700132195, C = RU, ST = Moscow, L = Moscow, O = Sberbank of Russia OJSC, OU = 00CA, CN = online.sberbank.ru
verify return:1
---
Certificate chain
 0 s:/jurisdictionC=RU/businessCategory=Private Organization/serialNumber=1027700132195/C=RU/ST=Moscow/L=Moscow/O=Sberbank of Russia OJSC/OU=00CA/CN=online.sberbank.ru
   i:/C=US/O=thawte, Inc./CN=thawte EV SSL CA - G3
 1 s:/C=US/O=thawte, Inc./CN=thawte EV SSL CA - G3
   i:/C=US/O=thawte, Inc./OU=Certification Services Division/OU=(c) 2006 thawte, Inc. - For authorized use only/CN=thawte Primary Root CA
 2 s:/C=US/O=thawte, Inc./OU=Certification Services Division/OU=(c) 2006 thawte, Inc. - For authorized use only/CN=thawte Primary Root CA
   i:/C=ZA/ST=Western Cape/L=Cape Town/O=Thawte Consulting cc/OU=Certification Services Division/CN=Thawte Premium Server CA/emailAddress=premium-server@thawte.com
 3 s:/C=ZA/ST=Western Cape/L=Cape Town/O=Thawte Consulting cc/OU=Certification Services Division/CN=Thawte Premium Server CA/emailAddress=premium-server@thawte.com
   i:/C=ZA/ST=Western Cape/L=Cape Town/O=Thawte Consulting cc/OU=Certification Services Division/CN=Thawte Premium Server CA/emailAddress=premium-server@thawte.com
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/jurisdictionC=RU/businessCategory=Private Organization/serialNumber=1027700132195/C=RU/ST=Moscow/L=Moscow/O=Sberbank of Russia OJSC/OU=00CA/CN=online.sberbank.ru
issuer=/C=US/O=thawte, Inc./CN=thawte EV SSL CA - G3
---
No client certificate CA names sent
---
SSL handshake has read 4599 bytes and written 623 bytes
---
New, TLSv1/SSLv3, Cipher is AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : AES256-GCM-SHA384
    Session-ID: 0D21EBA8A9FA8D181329EFB7C67FACBD59C75A8E77940DCE4B01EB4277E05037
    Session-ID-ctx:
    Master-Key: 67373CD6E906F155001F1AA40011837EFA015D41D7DF9D3432DDB5F46825879546B855FDAD44C261ED193E39B2E3CCE3
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1479317412
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
---