# openssl s_client -connect bootstrap.saltstack.com:443
CONNECTED(00000003)
depth=2 C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Certification Authority
verify error:num=20:unable to get local issuer certificate
verify return:0
---
Certificate chain
 0 s:/OU=Domain Control Validated/OU=EssentialSSL Wildcard/CN=*.saltstack.com
   i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA
 1 s:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA
   i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Certification Authority
 2 s:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Certification Authority
   i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root
 3 s:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA
   i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Certification Authority
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIRAKUoqctUeQ1yI9e4BEBZoH0wDQYJKoZIhvcNAQELBQAw
gZAxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTYwNAYD
VQQDEy1DT01PRE8gUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIg
Q0EwHhcNMTUwNDA2MDAwMDAwWhcNMTYwNDI3MjM1OTU5WjBdMSEwHwYDVQQLExhE
b21haW4gQ29udHJvbCBWYWxpZGF0ZWQxHjAcBgNVBAsTFUVzc2VudGlhbFNTTCBX
aWxkY2FyZDEYMBYGA1UEAxQPKi5zYWx0c3RhY2suY29tMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAyG1TvoewzFJt3x1FHAfyROlUCPM+bbSn8JCxjOYi
x88hKKVlCmgJcZ/W0lfL7lq29OugWSXSG+9iO3Kbq40wxs2tJZiHjmVFj3q244jR
B6kFyvTyAtqWr1JZEog04ukqdKgNdXLZRUDWbqlLgF10usauLJZDreYmnakmh784
+LXc9bdMaRk1iojHoajnxEcEi0JRAAM4o4MkTLYoGV3JP930dsSGJTKdQLNy115h
ALULgRKRBh2Y5TWCe41DZv5Rj8PoSa0yF7s+iM1uuNSvW/G+W3zH1vga+mX2vDqx
Aco9X9X+mjb0lj0Rnbopv9cIM5rC3W4c0gMTkenlYDrSMwIDAQABo4IB2zCCAdcw
HwYDVR0jBBgwFoAUkK9qOpRaC9iQ6hJWc99DtDoo2ucwHQYDVR0OBBYEFH1NnAEA
jRvXErVewA7OmF/KJuLOMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBPBgNVHSAESDBGMDoGCysGAQQB
sjEBAgIHMCswKQYIKwYBBQUHAgEWHWh0dHBzOi8vc2VjdXJlLmNvbW9kby5jb20v
Q1BTMAgGBmeBDAECATBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vY3JsLmNvbW9k
b2NhLmNvbS9DT01PRE9SU0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0Eu
Y3JsMIGFBggrBgEFBQcBAQR5MHcwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuY29t
b2RvY2EuY29tL0NPTU9ET1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJD
QS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTApBgNV
HREEIjAggg8qLnNhbHRzdGFjay5jb22CDXNhbHRzdGFjay5jb20wDQYJKoZIhvcN
AQELBQADggEBAIjNCvo8crzixXydsMi6GVajfHzAlCV0qgIMpCmTH+RV9XHJ6qAg
ZL0tWw+ETHQ2VwIqeegwj0K1WCS97bPWzqFn0QUn5HW24rTcJj0f4vYaZ3bWdRmQ
cevREyn0nSHTz05VuB2zQ/H2GxKak5o52BYrdLzVxNfNVam7yVLPyEj9aA9HQDVK
Gn1qILwLmDoYxTS9rIanXgIiEitYW4IUM6hvZfla+MgLA8BHhoZTKfmxcMj81P9h
2GxNt58ba6GkYBSj8ANDgNSxOWIQafJKcxgnbuwDOILvyBBQcIzEdulCj5Q69mYP
YQVsRlwWwmql6Rjn+x4mb7u5GSP/NURSJR4=
-----END CERTIFICATE-----
subject=/OU=Domain Control Validated/OU=EssentialSSL Wildcard/CN=*.saltstack.com
issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA
---
No client certificate CA names sent
---
SSL handshake has read 6534 bytes and written 424 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: 2063A1DCE61F554D30BABE63814BCD327F1B9D3CF3F662C366ABF9C98E3B65A9
    Session-ID-ctx:
    Master-Key: 9FF83A35E3F7FD7EB501157B0AA7CB31087634EC052CB0D9E601E06B6C70678E0CCCB8D2C114AAAD64877758708F603E
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - 2b b7 80 f5 29 31 b4 16-4b 7d 89 93 40 32 4b 6b   +...)1..K}..@2Kk
    0010 - 19 28 61 86 f6 d6 f0 0c-b4 af 29 9e 16 60 9b 1d   .(a.......)..`..
    0020 - d2 1b b8 2f 9e ff f4 d8-eb 85 73 70 a9 b8 79 50   .../......sp..yP
    0030 - eb 3f 82 91 d3 81 03 fb-c0 43 23 28 bb 43 f6 2a   .?.......C#(.C.*
    0040 - eb bc a2 46 bd 4b 60 c7-51 8b c3 6c 0b f8 4f b8   ...F.K`.Q..l..O.
    0050 - 27 f8 ae 2e 23 1e 4d a9-e6 43 8d 15 5e 53 fe f5   '...#.M..C..^S..
    0060 - ae 22 c6 3b 51 bd 0a 07-5f ec 97 6b 4d bc 9f 86   .".;Q..._..kM...
    0070 - 72 ae ca 54 dc d5 cd 0e-6c 82 bf 4a 51 be d9 07   r..T....l..JQ...
    0080 - a3 22 75 3f 01 0a d1 7d-7e 2b 45 46 19 e2 42 bb   ."u?...}~+EF..B.
    0090 - e0 08 66 36 d8 88 ed 60-84 3e 4d 32 eb 8f 81 1f   ..f6...`.>M2....

    Start Time: 1441874446
    Timeout   : 300 (sec)
    Verify return code: 20 (unable to get local issuer certificate)
---
^C