Test

openssl s_client -host idp.example.org -port 443 -showcerts
CONNECTED(00000003)
depth=1 C = IT, ST = Italy, L = Rome, OU = Example, CN = Example CA, emailAddress = custom-ca@example.org
verify return:1
depth=0 CN = idp.example.org
verify return:1
---
Certificate chain
 0 s:/CN=idp.example.org
   i:/C=IT/ST=Italy/L=Rome/OU=Example/CN=Example CA/emailAddress=custom-ca@example.org
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:/C=IT/ST=Italy/L=Rome/OU=Example/CN=Example CA/emailAddress=custom-ca@example.org
   i:/C=IT/ST=Italy/L=Rome/OU=Example/CN=Example CA/emailAddress=custom-ca@example.org
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=/CN=idp.example.org
issuer=/C=IT/ST=Italy/L=Rome/OU=Example/CN=Example CA/emailAddress=custom-ca@example.org
---
No client certificate CA names sent
Peer signing digest: SHA512
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 3819 bytes and written 302 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 4096 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: 3B0B1928BFF1CA1DB8C0E97A05240F46C71E003AE7937B09BE2DB891F2D4C1E9
    Session-ID-ctx:
    Master-Key: FE30E80D5FEA7B9FC81A272491FCCFD85C042FA5A053273290563C244C0F1747393B642730B95655CA8317710992913A
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - d4 45 85 ee 88 3c 44 8f-07 d8 72 d2 a9 be 03 8e   .E...<D...r.....
    0010 - e4 6a 9f 9f 6f 4b 81 db-2a 4f 38 49 ad 36 44 3e   .j..oK..*O8I.6D>
    0020 - d5 46 00 47 d7 77 35 24-7a ca 60 11 53 99 b2 00   .F.G.w5$z.`.S...
    0030 - a7 b3 ca 71 87 99 3d 10-b2 7d 96 39 37 bc 51 2c   ...q..=..}.97.Q,
    0040 - b4 5f 1f d3 fa 00 9a 4a-b3 93 60 4c d5 fd b6 8f   ._.....J..`L....
    0050 - 41 e3 21 aa 09 ff 46 45-f0 ec 23 f9 73 8a 2c 02   A.!...FE..#.s.,.
    0060 - dc bf a3 32 79 5f ae 89-ed f4 91 43 75 a8 d7 0d   ...2y_.....Cu...
    0070 - b6 3c 0a 94 f4 13 6a 8f-76 e4 92 03 30 59 05 bd   .<....j.v...0Y..
    0080 - 44 9b 30 fd 12 00 ee 09-d9 e7 48 5f 74 28 85 43   D.0.......H_t(.C
    0090 - 6e f6 65 7f cb 12 e9 82-64 a4 00 01 cf e8 84 71   n.e.....d......q
    00a0 - 02 d6 7f 07 9c 95 e1 06-7d cb fe c9 a2 d9 0d fa   ........}.......
    00b0 - eb 01 05 24 9a e2 56 b6-ab 6b 60 bb 83 62 ce 63   ...$..V..k`..b.c

    Start Time: 1560866041
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
---