$ openssl s_client -CApath /etc/ssl/certs -connect www.youtube.com:443
CONNECTED(00000003)
depth=3 C = US, O = Equifax, OU = Equifax Secure Certificate Authority
verify return:1
depth=2 C = US, O = GeoTrust Inc., CN = GeoTrust Global CA
verify return:1
depth=1 C = US, O = Google Inc, CN = Google Internet Authority G2
verify return:1
depth=0 C = US, ST = California, L = Mountain View, O = Google Inc, CN = *.google.com
verify return:1
---
Certificate chain
 0 s:/C=US/ST=California/L=Mountain View/O=Google Inc/CN=*.google.com
   i:/C=US/O=Google Inc/CN=Google Internet Authority G2
 1 s:/C=US/O=Google Inc/CN=Google Internet Authority G2
   i:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA
 2 s:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA
   i:/C=US/O=Equifax/OU=Equifax Secure Certificate Authority
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=US/ST=California/L=Mountain View/O=Google Inc/CN=*.google.com
issuer=/C=US/O=Google Inc/CN=Google Internet Authority G2
---
No client certificate CA names sent
---
SSL handshake has read 4500 bytes and written 431 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: F1C0FA8BB340A8EB77345FE974C75E21CD15EBB9FC40287F1635A126277D7863
    Session-ID-ctx:
    Master-Key: 26458A4CCDE87C86E5AE5132F6EC5D934D98971956EA399260C88941022774BBBD0979EFB292E4B9A463999608A7387B
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 100800 (seconds)
    TLS session ticket:
    0000 - ca ca bd be 71 78 c2 14-c0 e3 e0 7c 5d 89 c4 bd   ....qx.....|]...
    0010 - aa 2c 4e 6c 3b cb ee d0-b3 be 84 53 81 74 f3 1d   .,Nl;......S.t..
    0020 - df e5 99 3d 0e 7a a6 ae-65 48 9d 1b cc dd 31 89   ...=.z..eH....1.
    0030 - 52 f8 8c 97 36 5f 64 5f-5b 1b 70 71 9a fc 5e 98   R...6_d_[.pq..^.
    0040 - fe 54 aa d0 df 9a 07 9e-85 75 da 48 16 c1 21 4d   .T.......u.H..!M
    0050 - bc 0f 38 d0 d6 91 69 f8-93 52 c3 d7 b8 90 1f b6   ..8...i..R......
    0060 - a7 83 45 75 de 45 37 a5-cb f2 48 74 7b ed 94 6d   ..Eu.E7...Ht{..m
    0070 - 26 52 d7 ec b6 e1 bb b1-fb 15 b0 b4 5f 22 59 3c   &R.........._"Y<
    0080 - 61 c7 c3 d5 aa 71 23 e8-0e 22 4f d1 67 ab df 6b   a....q#.."O.g..k
ubuntu@ip-172-31-45-52:~$ openssl s_client -CApath /etc/ssl/certs -connect www.youtube.com:443
CONNECTED(00000003)
depth=3 C = US, O = Equifax, OU = Equifax Secure Certificate Authority
verify return:1
depth=2 C = US, O = GeoTrust Inc., CN = GeoTrust Global CA
verify return:1
depth=1 C = US, O = Google Inc, CN = Google Internet Authority G2
verify return:1
depth=0 C = US, ST = California, L = Mountain View, O = Google Inc, CN = *.google.com
verify return:1
---
Certificate chain
 0 s:/C=US/ST=California/L=Mountain View/O=Google Inc/CN=*.google.com
   i:/C=US/O=Google Inc/CN=Google Internet Authority G2
 1 s:/C=US/O=Google Inc/CN=Google Internet Authority G2
   i:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA
 2 s:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA
   i:/C=US/O=Equifax/OU=Equifax Secure Certificate Authority
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=US/ST=California/L=Mountain View/O=Google Inc/CN=*.google.com
issuer=/C=US/O=Google Inc/CN=Google Internet Authority G2
---
No client certificate CA names sent
---
SSL handshake has read 4500 bytes and written 431 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: 4AEB756ADECB440A987F1360DAD4DCF7D3C845D9F485192B4C632625BA27F6F3
    Session-ID-ctx:
    Master-Key: 555A297A37FEF624174256E5104D930B64541EB18C0C432295C6CEE3E69CA81DABEF918B028091662A61F1DA872F0215
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 100800 (seconds)
    TLS session ticket:
    0000 - ca ca bd be 71 78 c2 14-c0 e3 e0 7c 5d 89 c4 bd   ....qx.....|]...
    0010 - a3 1e 98 72 ce 6d f5 c6-4c bd 24 f0 93 77 9f 64   ...r.m..L.$..w.d
    0020 - 7d 92 22 3c c0 93 80 a3-09 67 0a 04 fa 96 c9 e5   }."<.....g......
    0030 - 36 f5 9c 7a 0a bb 5c 3d-b6 aa 4d 9e 8b fb 8b 93   6..z..\=..M.....
    0040 - 5b 8e a9 46 ee e4 76 1a-a1 90 74 ad 6d 3d f7 2b   [..F..v...t.m=.+
    0050 - 44 94 a3 7c c7 4a e7 dd-5b 1f 7f 30 d3 06 70 04   D..|.J..[..0..p.
    0060 - 11 d6 c3 bd de 31 95 4f-25 37 62 fb cf 5f a3 f3   .....1.O%7b.._..
    0070 - 1b 1b 09 fd f4 bc 74 33-46 c2 5a 77 09 b6 68 cb   ......t3F.Zw..h.
    0080 - 4a 8e 14 a8 67 3a 48 92-60 b8 00 81 09 48 fb 59   J...g:H.`....H.Y
    0090 - 5e 99 bb 74 44 26 99 83-7b d9 44 b0 db 52 34 3d   ^..tD&..{.D..R4=
    00a0 - ec 48 eb f2                                       .H..

    Start Time: 1415883309
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
---
^C