ohessten% security find-certificate -a /System/Library/Keychains/SystemRootCertificates.keychainc >osx_system_roots.pem
ohessten% /path/to/homebrew/bin/openssl s_client -CAfile osx_system_roots.pem -verify 5 -connect sketchy.example.org:443