qdii@tst:~$ openssl s_client -showcerts -connect ppt.dodges.it:8141
CONNECTED(00000003)
depth=0 CN = puppet.ppt.svc.cluster.local
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 CN = puppet.ppt.svc.cluster.local
verify error:num=21:unable to verify the first certificate
verify return:1
depth=0 CN = puppet.ppt.svc.cluster.local
verify return:1
---
Certificate chain
 0 s:CN = puppet.ppt.svc.cluster.local
   i:CN = "Puppet CA generated on puppet at 2024-07-13 14:29:33 +0000"
   a:PKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA256
   v:NotBefore: Jul 12 14:29:33 2024 GMT; NotAfter: Jul 10 14:29:38 2039 GMT
-----BEGIN CERTIFICATE-----
MIIGPTCCBCWgAwIBAgIBATANBgkqhkiG9w0BAQsFADBFMUMwQQYDVQQDDDpQdXBw
ZXQgQ0EgZ2VuZXJhdGVkIG9uIHB1cHBldCBhdCAyMDI0LTA3LTEzIDE0OjI5OjMz
ICswMDAwMB4XDTI0MDcxMjE0MjkzM1oXDTM5MDcxMDE0MjkzOFowJzElMCMGA1UE
AwwccHVwcGV0LnBwdC5zdmMuY2x1c3Rlci5sb2NhbDCCAiIwDQYJKoZIhvcNAQEB
BQADggIPADCCAgoCggIBAMDjnpzGU7qAx8SSYbILUfWRCNcGzfSAX9YjjT/VTSQe
IEVxfg5KFt5HBtcNnvVTBbW9vBjDGjaboKXfB2iqvMbPxgFQ7FpPdeJ52VmIRLx1
2LcbyAIT6iiuDnCI9syQHBEKl22o/UzaPCLwR6zwmow8gU82tfbFhj6bQPG3tAuo
lH9VyX5Rl8g/YjelYgjQUK52t3EKIKrBiwjq6jlVz6W6O1g/Si1rC2S4gmEztjl2
VyjrX56Pgjc4pDiAghbwuhxHwjg0biXe6ycWmV2duHmIhks7q+Q8POtbjQPxiwc7
ooP5t8/o5iB4WHn1lJ7GLgbkQPNSNFF+R2VEOwnAcIz+KX4qM94oVi0QnNHMcX3y
v32zdRTqmrU5yf92fMzhLMDXvezLiBtK1gODDzpF1dBlFZ/o1/g7xy5/ZC7husId
8QABvnn0dzrYD/zOzja+Z+E1keZrmOSO/xx9kg4H4NheL1VTG8fJPnPdx+fwS++Y
8Ca3HbV6yxQ70mvT1L2/h2pqRCK7qz/Xlpa6b1NEgfNzJEoVa7EORyWz6fsbvJTP
pHCDqcTBz8hLLOAA8AnJkNQiROoGS5RLvFgdfy/8TppvkXh3DnM1FonYgLzcd3s4
hm78/z+yavl9hv8zN/uxjMwnPLi1pgX5b8wuSZtDkTVMbixM+Dl2GkBZu7ONTyeP
AgMBAAGjggFUMIIBUDAMBgNVHRMBAf8EAjAAMDEGCWCGSAGG+EIBDQQkFiJQdXBw
ZXQgU2VydmVyIEludGVybmFsIENlcnRpZmljYXRlMB8GA1UdIwQYMBaAFABrtDLl
D9/uspxuTERGKQl4w5CVMCAGA1UdJQEB/wQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0OBBYEFJwtW7y38K+qrruwd6sgsi6tlWid
MBUGCysGAQQBgoxMAQMnBAYMBHRydWUwgYMGA1UdEQR8MHqCHHB1cHBldC5wcHQu
c3ZjLmNsdXN0ZXIubG9jYWyCBnB1cHBldIIkcHVwcGV0LXB1cHBldHNlcnZlci1h
Z2VudHMtdG8tcHVwcGV0ghpwdXBwZXQtcHVwcGV0c2VydmVyLXB1cHBldIIQcHVw
cGV0LmRvZGdlcy5pdDANBgkqhkiG9w0BAQsFAAOCAgEAaKe/QrOteOEs8+sucp2z
KgAxAZK5134sVtO4pvT3Xp0lkGTwuo56dns3QzFy8v0qxcXmUE3/fVA+GdLEAF24
cmcHqhjDtYHZFg0v7TrLyx79QxxobQdn7XPq0G26jEuA2w+2KmNvsfoSVvOEO3WQ
l8rsW1LoThQgzbxwUNZsFCLQanA3hmNvs250p2J41DyIBFrHa8Sta0M1PKVACyeB
CnH4ntWevrKYedomErnQwDFcTFzV394VDmHU7rbIlehwas/iYGBOtcFFCQSnBvat
xdWm+hfW4gggiYT4q/YhXT5W5jNYxEWdyAcWQbP6npwW7dCwqZNgNMF/HWXTZ0do
+OYUkNHvGuBbt97aj3PeX2ya1WzdEmxJE7VEZ+2ppOo8qQXTCNQ6j0x/kCawpROO
rywpJ35C6xJ33lPptwsRs9SMflWF4/R0j+NSZayhntq1YZbh535iyJDqKTusJjro
H6CK1+fZoMgNIyrfpz7986E/nkYGhlzuywtPmApKMIKsYS/MdzO1vnr4NQa2yxA/
Iqpm0lKVVNrJ0xsZv0vaioYIOEXvAjXUmwM8mnri84Wc5D/UsvnftYiDFruXm0/h
Z7TRXhQ70PSICSpsDS+JgWJv3xa6ChJgA1r/q+LycFBrRxN/6wSQvDNMtP2XAH0B
eofdLTZqkdcpkD6N0S1YfS4=
-----END CERTIFICATE-----
---
Server certificate
subject=CN = puppet.ppt.svc.cluster.local
issuer=CN = "Puppet CA generated on puppet at 2024-07-13 14:29:33 +0000"
---
Acceptable client certificate CA names
CN = "Puppet CA generated on puppet at 2024-07-13 14:29:33 +0000"
CN = Puppet Root CA: 6a3f66024e7244
Requested Signature Algorithms: ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA512:Ed25519:Ed448:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA+SHA256:RSA+SHA384:RSA+SHA512:ECDSA+SHA1:RSA+SHA1
Shared Requested Signature Algorithms: ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA512:Ed25519:Ed448:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA+SHA256:RSA+SHA384:RSA+SHA512
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 2584 bytes and written 409 bytes
Verification error: unable to verify the first certificate
---
New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256
Server public key is 4096 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 21 (unable to verify the first certificate)
---
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
    Protocol  : TLSv1.3
    Cipher    : TLS_AES_128_GCM_SHA256
    Session-ID: 6B740076B99C3FC64C42D34B160BD2B17E4C7F089CF2B8C2F62606BECAF60471
    Session-ID-ctx:
    Resumption PSK: 3D9F3D41B31E461D6881AA3268967624F00EA022A47C006A4F9A37AE5CA38A51
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 86400 (seconds)
    TLS session ticket:
    0000 - da ca 1e 7c 29 e8 8d dd-ae 41 a0 3b b1 59 b5 e9   ...|)....A.;.Y..
    0010 - 20 9b 55 18 f3 82 bb 32-c2 71 ba 89 13 8e 7b d9    .U....2.q....{.

    Start Time: 1750145304
    Timeout   : 7200 (sec)
    Verify return code: 21 (unable to verify the first certificate)
    Extended master secret: no
    Max Early Data: 0
---
read R BLOCK
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
    Protocol  : TLSv1.3
    Cipher    : TLS_AES_128_GCM_SHA256
    Session-ID: ED4A6CDEDD05AB0EFA977D462A83BA0DC679BC2ED4146475E818E6D6A13E4C0D
    Session-ID-ctx:
    Resumption PSK: 403144BC0077D2D4BC6D02AAB63341462F56D04DE36B3CCC75985A96A2BA57CE
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 86400 (seconds)
    TLS session ticket:
    0000 - 89 e8 d4 9b f2 0b b4 6e-a3 fa 2a b0 8d 16 9e 35   .......n..*....5
    0010 - 18 0f 8a 99 d8 fa fc c1-c5 b3 c9 5f 26 2f e2 d7   ..........._&/..

    Start Time: 1750145304
    Timeout   : 7200 (sec)
    Verify return code: 21 (unable to verify the first certificate)
    Extended master secret: no
    Max Early Data: 0
---
read R BLOCK