root@host:~/ssltest# openssl s_client -showcerts -connect example.com:443
CONNECTED(00000004)
depth=1 C = US, O = "CloudFlare, Inc.", OU = CloudFlare Origin SSL Certificate Authority, L = San Francisco, ST = California
verify error:num=19:self signed certificate in certificate chain
verify return:1
depth=1 C = US, O = "CloudFlare, Inc.", OU = CloudFlare Origin SSL Certificate Authority, L = San Francisco, ST = California
verify return:1
depth=0 O = "CloudFlare, Inc.", OU = CloudFlare Origin CA, CN = CloudFlare Origin Certificate
verify return:1
---
Certificate chain
 0 s:O = "CloudFlare, Inc.", OU = CloudFlare Origin CA, CN = CloudFlare Origin Certificate
   i:C = US, O = "CloudFlare, Inc.", OU = CloudFlare Origin SSL Certificate Authority, L = San Francisco, ST = California
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = US, O = "CloudFlare, Inc.", OU = CloudFlare Origin SSL Certificate Authority, L = San Francisco, ST = California
   i:C = US, O = "CloudFlare, Inc.", OU = CloudFlare Origin SSL Certificate Authority, L = San Francisco, ST = California
-----BEGIN CERTIFICATE-----
MIIEADCCAuigAwIBAgIID+rOSdTGfGcwDQYJKoZIhvcNAQELBQAwgYsxCzAJBgNV
BAYTAlVTMRkwFwYDVQQKExBDbG91ZEZsYXJlLCBJbmMuMTQwMgYDVQQLEytDbG91
ZEZsYXJlIE9yaWdpbiBTU0wgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MRYwFAYDVQQH
Ew1TYW4gRnJhbmNpc2NvMRMwEQYDVQQIEwpDYWxpZm9ybmlhMB4XDTE5MDgyMzIx
MDgwMFoXDTI5MDgxNTE3MDAwMFowgYsxCzAJBgNVBAYTAlVTMRkwFwYDVQQKExBD
bG91ZEZsYXJlLCBJbmMuMTQwMgYDVQQLEytDbG91ZEZsYXJlIE9yaWdpbiBTU0wg
Q2VydGlmaWNhdGUgQXV0aG9yaXR5MRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRMw
EQYDVQQIEwpDYWxpZm9ybmlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwEiVZ/UoQpHmFsHvk5isBxRehukP8DG9JhFev3WZtG76WoTthvLJFRKFCHXm
V6Z5/66Z4S09mgsUuFwvJzMnE6Ej6yIsYNCb9r9QORa8BdhrkNn6kdTly3mdnykb
OomnwbUfLlExVgNdlP0XoRoeMwbQ4598foiHblO2B/LKuNfJzAMfS7oZe34b+vLB
yrP/1bgCSLdc1AxQc1AC0EsQQhgcyTJNgnG4va1c7ogPlwKyhbDyZ4e59N5lbYPJ
SmXI/cAe3jXj1FBLJZkwnoDKe0v13xeF+nF32smSH0qB7aJX2tBMW4TWtFPmzs5I
lwrFSySWAdwYdgxw180yKU0dvwIDAQABo2YwZDAOBgNVHQ8BAf8EBAMCAQYwEgYD
VR0TAQH/BAgwBgEB/wIBAjAdBgNVHQ4EFgQUJOhTV118NECHqeuU27rhFnj8KaQw
HwYDVR0jBBgwFoAUJOhTV118NECHqeuU27rhFnj8KaQwDQYJKoZIhvcNAQELBQAD
ggEBAHwOf9Ur1l0Ar5vFE6PNrZWrDfQIMyEfdgSKofCdTckbqXNTiXdgbHs+TWoQ
wAB0pfJDAHJDXOTCWRyTeXOseeOi5Btj5CnEuw3P0oXqdqevM1/+uWp0CM35zgZ8
VD4aITxity0djzE6Qnx3Syzz+ZkoBgTnNum7d9A66/V636x4vTeqbZFBr9erJzgz
hhurjcoacvRNhnjtDRM0dPeiCJ50CP3wEYuvUzDHUaowOsnLCjQIkWbR7Ni6KEIk
MOz2U0OBSif3FTkhCgZWQKOOLo1P42jHC3ssUZAtVNXrCk3fw9/E15k8NPkBazZ6
0iykLhH1trywrKRMVw67F44IE8Y=
-----END CERTIFICATE-----
---
Server certificate
subject=O = "CloudFlare, Inc.", OU = CloudFlare Origin CA, CN = CloudFlare Origin Certificate

issuer=C = US, O = "CloudFlare, Inc.", OU = CloudFlare Origin SSL Certificate Authority, L = San Francisco, ST = California

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 2907 bytes and written 444 bytes
Verification error: self signed certificate in certificate chain
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: 2B4EA1E916364D30DFACE92EF31F387435C069ECDE673CF17AFB9900E1D0D4DE
    Session-ID-ctx:
    Master-Key: B4968924FC38BFC801A036EAD041D6774353A7F96079F5DBB7B2380307316525042A8A60955F1795F3414D72395C981D
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - 1f a5 8b b5 65 32 a1 bb-6b 65 b1 c2 03 f7 4c 51   ....e2..ke....LQ
    0010 - 0d 91 5d 96 31 c2 c6 dd-0a 2a 9c 23 74 e0 36 f1   ..].1....*.#t.6.
    0020 - 77 f1 10 4d a8 34 53 8c-fa d7 e6 5e 67 7e 16 81   w..M.4S....^g~..
    0030 - fa 81 30 6b 72 61 86 6b-a3 08 e9 5f df 44 6f 91   ..0kra.k..._.Do.
    0040 - 27 4a 6b 58 d3 23 31 14-4d b4 a7 9a 7b fb 75 a3   'JkX.#1.M...{.u.
    0050 - a5 54 52 8e 8b 89 33 24-8b 43 c2 7b d3 94 d9 0c   .TR...3$.C.{....
    0060 - 84 05 b5 3b 36 6c 5b 50-ef 63 ae 64 17 1d bb 90   ...;6l[P.c.d....
    0070 - 72 e8 2b 69 62 3d eb 81-24 4f ad f6 98 7e ed 49   r.+ib=..$O...~.I
    0080 - 3d 13 e8 c1 2c 2c c5 8d-20 84 b2 1a 30 d1 52 aa   =...,,.. ...0.R.
    0090 - a6 35 4d f1 2b f8 c7 9b-93 37 87 f6 3e 4e 68 f9   .5M.+....7..>Nh.
    00a0 - 3e 2c 1e 00 85 51 34 76-01 87 39 d5 34 30 f6 c8   >,...Q4v..9.40..
    00b0 - 90 52 45 ba 93 c6 4b 9c-bf 15 6b 6a ab d7 3b 7f   .RE...K...kj..;.

    Start Time: 1590706337
    Timeout   : 7200 (sec)
    Verify return code: 19 (self signed certificate in certificate chain)
    Extended master secret: no
---