➜ swiff git:(master) ✗ openssl s_client -connect monabo.lemonde.fr:443 -tls1 -servername monabo.lemonde.fr | openssl x509 -text -noout depth=1 C = BE, O = GlobalSign nv-sa, CN = GlobalSign Domain Validation CA - G2 verify error:num=20:unable to get local issuer certificate verify return:0 Certificate: Data: Version: 3 (0x2) Serial Number: 11:21:56:eb:c5:b1:54:fb:88:02:47:ec:cd:51:d9:38:89:d2 Signature Algorithm: sha1WithRSAEncryption Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Domain Validation CA - G2 Validity Not Before: Dec 18 17:19:34 2013 GMT Not After : Jan 19 18:10:24 2017 GMT Subject: OU=Domain Control Validated, CN=*.lemonde.fr Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:d3:59:62:60:4e:18:52:3d:f5:f9:e2:54:5a:dd: 54:09:05:27:ae:f9:42:20:d6:ff:0a:5f:97:64:33: 64:5c:9a:80:67:de:6a:be:f9:6a:cb:1c:14:14:df: 90:cb:77:9a:d9:22:15:45:eb:ac:9a:c3:36:1f:52: ee:22:b5:9f:67:22:35:52:64:e0:4e:44:f8:ab:01: 3a:e8:f6:57:81:27:3b:28:3c:b1:da:e2:59:12:63: 99:89:e2:ed:bf:42:09:4c:39:f3:d7:2e:4a:5d:d1: d7:4c:d1:cd:2c:98:f9:da:da:a0:10:85:17:92:05: 62:c1:89:f0:ff:5a:cd:f7:72:a8:e0:3d:f2:ad:c7: 44:64:88:72:40:84:53:fc:80:f9:5f:44:7b:bf:ce: 3c:93:87:05:af:d6:95:00:44:63:be:55:ac:25:8e: 25:3c:1c:2c:99:2d:d0:d0:72:da:f1:5f:a0:9b:4e: 56:20:10:4e:db:a7:cd:32:c8:32:48:cd:f9:bf:45: 8c:ca:b3:68:88:6d:61:fa:4c:80:87:0b:d6:f8:e6: d9:73:5d:27:b7:bf:0f:35:81:89:93:ee:fa:84:15: de:d4:99:45:d6:7a:fe:19:dc:71:56:29:00:6d:fb: 1b:1f:48:16:17:12:fe:0b:05:76:37:b7:f0:11:7a: 32:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 CPS: https://www.globalsign.com/repository/ X509v3 Subject Alternative Name: DNS:*.lemonde.fr, DNS:lemonde.fr X509v3 Basic Constraints: CA:FALSE X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 CRL Distribution Points: Full Name: URI:http://crl.globalsign.com/gs/gsdomainvalg2.crl Authority Information Access: CA Issuers - URI:http://secure.globalsign.com/cacert/gsdomainvalg2.crt OCSP - URI:http://ocsp2.globalsign.com/gsdomainvalg2 X509v3 Subject Key Identifier: 49:7C:AB:DD:45:95:AB:8C:15:8E:9A:E2:0E:FE:79:39:FF:5C:A6:3C X509v3 Authority Key Identifier: keyid:96:AD:FA:B0:5B:B9:83:64:2A:76:C2:1C:8A:69:DA:42:DC:FE:FD:28 Signature Algorithm: sha1WithRSAEncryption 33:65:d5:4d:39:4d:c9:86:52:bf:0f:d0:85:28:50:36:21:ac: 1d:f4:b4:69:22:48:5b:6b:99:64:19:51:71:0e:fc:c9:ca:5e: 05:e2:fc:ff:b8:e1:50:b8:4d:1c:82:a6:06:3e:3b:85:d2:ab: fe:1e:18:02:d3:c1:e6:54:f4:26:ce:20:af:a3:52:90:5c:a8: bb:ad:a0:a9:29:30:50:bd:64:f3:1e:26:76:d7:5d:05:2e:9e: 57:f2:3a:2a:fe:49:30:74:76:9f:b2:95:07:47:de:9e:8f:74: 5d:97:62:45:2b:16:d3:ae:80:66:22:b7:3a:b4:34:f0:33:e2: 40:bf:3d:39:3d:64:3f:94:b4:d7:a9:c6:e3:ca:76:76:86:67: 58:82:e9:95:4a:c4:70:93:6f:bc:34:5e:a6:6d:93:05:ae:41: ae:8a:ac:ef:c2:65:6c:8f:af:46:31:c1:98:ca:11:6c:56:87: 98:44:9d:8b:8a:29:03:a3:cf:c7:6c:d5:3c:29:9f:ba:ff:db: 2f:38:a6:be:29:3d:be:ec:01:dc:1f:6c:55:1d:7d:74:7e:f4: 74:18:5a:f3:ca:64:2b:1e:d7:82:36:2c:ee:08:a5:35:c2:54: 0b:b5:cc:8b:28:03:6e:1e:ad:b6:05:c3:01:67:34:59:db:8b: d4:20:b8:cb