[root@http4 amd64]# ./openssl s_client -connect portal.rosreestr.ru:4455 -CAfile ./root.pem
CONNECTED(00000005)
depth=2 emailAddress = dit@minsvyaz.ru, C = RU, ST = 77 \D0\9C\D0\BE\D1\81\D0\BA\D0\B2\D0\B0, L = \D0\B3. \D0\9C\D0\BE\D1\81\D0\BA\D0\B2\D0\B0, street = "\D1\83\D0\BB\D0\B8\D1\86\D0\B0 \D0\A2\D0\B2\D0\B5\D1\80\D1\81\D0\BA\D0\B0\D1\8F, \D0\B4\D0\BE\D0\BC 7", O = \D0\9C\D0\B8\D0\BD\D0\BA\D0\BE\D0\BC\D1\81\D0\B2\D1\8F\D0\B7\D1\8C \D0\A0\D0\BE\D1\81\D1\81\D0\B8\D0\B8, OGRN = 1047702026701, INN = 007710474375, CN = \D0\9C\D0\B8\D0\BD\D0\BA\D0\BE\D0\BC\D1\81\D0\B2\D1\8F\D0\B7\D1\8C \D0\A0\D0\BE\D1\81\D1\81\D0\B8\D0\B8
verify return:1
depth=1 OGRN = 1027700485757, INN = 007705401340, C = RU, ST = 77 \D0\9C\D0\BE\D1\81\D0\BA\D0\B2\D0\B0, L = \D0\9C\D0\BE\D1\81\D0\BA\D0\B2\D0\B0, street = "\D0\BF\D0\B5\D1\80\D0\B5\D1\83\D0\BB\D0\BE\D0\BA \D0\9E\D1\80\D0\BB\D0\B8\D0\BA\D0\BE\D0\B2, \D0\B4\D0\BE\D0\BC 10, \D1\81\D1\82\D1\80\D0\BE\D0\B5\D0\BD\D0\B8\D0\B5 1", OU = \D0\A3\D0\B4\D0\BE\D1\81\D1\82\D0\BE\D0\B2\D0\B5\D1\80\D1\8F\D1\8E\D1\89\D0\B8\D0\B9 \D1\86\D0\B5\D0\BD\D1\82\D1\80, O = \D0\A4\D0\93\D0\91\D0\A3 \"\D0\A4\D0\9A\D0\9F \D0\A0\D0\BE\D1\81\D1\80\D0\B5\D0\B5\D1\81\D1\82\D1\80\D0\B0\", CN = \D0\A4\D0\93\D0\91\D0\A3 \"\D0\A4\D0\9A\D0\9F \D0\A0\D0\BE\D1\81\D1\80\D0\B5\D0\B5\D1\81\D1\82\D1\80\D0\B0\"
verify return:1
depth=0 OGRN = 1047796940465, INN = 007706560536, street = "\D1\83\D0\BB. \D0\92\D0\BE\D1\80\D0\BE\D0\BD\D1\86\D0\BE\D0\B2\D0\BE \D0\9F\D0\BE\D0\BB\D0\B5, \D0\B4. 4\D0\90", L = \D0\9C\D0\BE\D1\81\D0\BA\D0\B2\D0\B0, ST = 77 \D0\9C\D0\BE\D1\81\D0\BA\D0\B2\D0\B0, C = RU, emailAddress = 00_OZIL1@rosreestr.ru, O = \D0\A0\D0\BE\D1\81\D1\80\D0\B5\D0\B5\D1\81\D1\82\D1\80, CN = \D0\A0\D0\BE\D1\81\D1\80\D0\B5\D0\B5\D1\81\D1\82\D1\80
verify return:1
139651781535552:error:1409441A:SSL routines:ssl3_read_bytes:tlsv1 alert decode error:ssl/record/rec_layer_s3.c:1407:SSL alert number 50
---
Certificate chain
 0 s:/OGRN=1047796940465/INN=007706560536/street=\xD1\x83\xD0\xBB. \xD0\x92\xD0\xBE\xD1\x80\xD0\xBE\xD0\xBD\xD1\x86\xD0\xBE\xD0\xB2\xD0\xBE \xD0\x9F\xD0\xBE\xD0\xBB\xD0\xB5, \xD0\xB4. 4\xD0\x90/L=\xD0\x9C\xD0\xBE\xD1\x81\xD0\xBA\xD0\xB2\xD0\xB0/ST=77 \xD0\x9C\xD0\xBE\xD1\x81\xD0\xBA\xD0\xB2\xD0\xB0/C=RU/emailAddress=00_OZIL1@rosreestr.ru/O=\xD0\xA0\xD0\xBE\xD1\x81\xD1\x80\xD0\xB5\xD0\xB5\xD1\x81\xD1\x82\xD1\x80/CN=\xD0\xA0\xD0\xBE\xD1\x81\xD1\x80\xD0\xB5\xD0\xB5\xD1\x81\xD1\x82\xD1\x80
   i:/OGRN=1027700485757/INN=007705401340/C=RU/ST=77 \xD0\x9C\xD0\xBE\xD1\x81\xD0\xBA\xD0\xB2\xD0\xB0/L=\xD0\x9C\xD0\xBE\xD1\x81\xD0\xBA\xD0\xB2\xD0\xB0/street=\xD0\xBF\xD0\xB5\xD1\x80\xD0\xB5\xD1\x83\xD0\xBB\xD0\xBE\xD0\xBA \xD0\x9E\xD1\x80\xD0\xBB\xD0\xB8\xD0\xBA\xD0\xBE\xD0\xB2, \xD0\xB4\xD0\xBE\xD0\xBC 10, \xD1\x81\xD1\x82\xD1\x80\xD0\xBE\xD0\xB5\xD0\xBD\xD0\xB8\xD0\xB5 1/OU=\xD0\xA3\xD0\xB4\xD0\xBE\xD1\x81\xD1\x82\xD0\xBE\xD0\xB2\xD0\xB5\xD1\x80\xD1\x8F\xD1\x8E\xD1\x89\xD0\xB8\xD0\xB9 \xD1\x86\xD0\xB5\xD0\xBD\xD1\x82\xD1\x80/O=\xD0\xA4\xD0\x93\xD0\x91\xD0\xA3 "\xD0\xA4\xD0\x9A\xD0\x9F \xD0\xA0\xD0\xBE\xD1\x81\xD1\x80\xD0\xB5\xD0\xB5\xD1\x81\xD1\x82\xD1\x80\xD0\xB0"/CN=\xD0\xA4\xD0\x93\xD0\x91\xD0\xA3 "\xD0\xA4\xD0\x9A\xD0\x9F \xD0\xA0\xD0\xBE\xD1\x81\xD1\x80\xD0\xB5\xD0\xB5\xD1\x81\xD1\x82\xD1\x80\xD0\xB0"
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/OGRN=1047796940465/INN=007706560536/street=\xD1\x83\xD0\xBB. \xD0\x92\xD0\xBE\xD1\x80\xD0\xBE\xD0\xBD\xD1\x86\xD0\xBE\xD0\xB2\xD0\xBE \xD0\x9F\xD0\xBE\xD0\xBB\xD0\xB5, \xD0\xB4. 4\xD0\x90/L=\xD0\x9C\xD0\xBE\xD1\x81\xD0\xBA\xD0\xB2\xD0\xB0/ST=77 \xD0\x9C\xD0\xBE\xD1\x81\xD0\xBA\xD0\xB2\xD0\xB0/C=RU/emailAddress=00_OZIL1@rosreestr.ru/O=\xD0\xA0\xD0\xBE\xD1\x81\xD1\x80\xD0\xB5\xD0\xB5\xD1\x81\xD1\x82\xD1\x80/CN=\xD0\xA0\xD0\xBE\xD1\x81\xD1\x80\xD0\xB5\xD0\xB5\xD1\x81\xD1\x82\xD1\x80
issuer=/OGRN=1027700485757/INN=007705401340/C=RU/ST=77 \xD0\x9C\xD0\xBE\xD1\x81\xD0\xBA\xD0\xB2\xD0\xB0/L=\xD0\x9C\xD0\xBE\xD1\x81\xD0\xBA\xD0\xB2\xD0\xB0/street=\xD0\xBF\xD0\xB5\xD1\x80\xD0\xB5\xD1\x83\xD0\xBB\xD0\xBE\xD0\xBA \xD0\x9E\xD1\x80\xD0\xBB\xD0\xB8\xD0\xBA\xD0\xBE\xD0\xB2, \xD0\xB4\xD0\xBE\xD0\xBC 10, \xD1\x81\xD1\x82\xD1\x80\xD0\xBE\xD0\xB5\xD0\xBD\xD0\xB8\xD0\xB5 1/OU=\xD0\xA3\xD0\xB4\xD0\xBE\xD1\x81\xD1\x82\xD0\xBE\xD0\xB2\xD0\xB5\xD1\x80\xD1\x8F\xD1\x8E\xD1\x89\xD0\xB8\xD0\xB9 \xD1\x86\xD0\xB5\xD0\xBD\xD1\x82\xD1\x80/O=\xD0\xA4\xD0\x93\xD0\x91\xD0\xA3 "\xD0\xA4\xD0\x9A\xD0\x9F \xD0\xA0\xD0\xBE\xD1\x81\xD1\x80\xD0\xB5\xD0\xB5\xD1\x81\xD1\x82\xD1\x80\xD0\xB0"/CN=\xD0\xA4\xD0\x93\xD0\x91\xD0\xA3 "\xD0\xA4\xD0\x9A\xD0\x9F \xD0\xA0\xD0\xBE\xD1\x81\xD1\x80\xD0\xB5\xD0\xB5\xD1\x81\xD1\x82\xD1\x80\xD0\xB0"
---
Acceptable client certificate CA names
/emailAddress=dit@minsvyaz.ru/C=RU/ST=77 \xD0\xB3. \xD0\x9C\xD0\xBE\xD1\x81\xD0\xBA\xD0\xB2\xD0\xB0/L=\xD0\x9C\xD0\xBE\xD1\x81\xD0\xBA\xD0\xB2\xD0\xB0/street=125375 \xD0\xB3. \xD0\x9C\xD0\xBE\xD1\x81\xD0\xBA\xD0\xB2\xD0\xB0, \xD1\x83\xD0\xBB. \xD0\xA2\xD0\xB2\xD0\xB5\xD1\x80\xD1\x81\xD0\xBA\xD0\xB0\xD1\x8F, \xD0\xB4. 7/O=\xD0\x9C\xD0\xB8\xD0\xBD\xD0\xBA\xD0\xBE\xD0\xBC\xD1\x81\xD0\xB2\xD1\x8F\xD0\xB7\xD1\x8C \xD0\xA0\xD0\xBE\xD1\x81\xD1\x81\xD0\xB8\xD0\xB8/OGRN=1047702026701/INN=007710474375/CN=\xD0\x93\xD0\xBE\xD0\xBB\xD0\xBE\xD0\xB2\xD0\xBD\xD0\xBE\xD0\xB9 \xD1\x83\xD0\xB4\xD0\xBE\xD1\x81\xD1\x82\xD0\xBE\xD0\xB2\xD0\xB5\xD1\x80\xD1\x8F\xD1\x8E\xD1\x89\xD0\xB8\xD0\xB9 \xD1\x86\xD0\xB5\xD0\xBD\xD1\x82\xD1\x80
/emailAddress=dit@minsvyaz.ru/C=RU/ST=77 \xD0\x9C\xD0\xBE\xD1\x81\xD0\xBA\xD0\xB2\xD0\xB0/L=\xD0\xB3. \xD0\x9C\xD0\xBE\xD1\x81\xD0\xBA\xD0\xB2\xD0\xB0/street=\xD1\x83\xD0\xBB\xD0\xB8\xD1\x86\xD0\xB0 \xD0\xA2\xD0\xB2\xD0\xB5\xD1\x80\xD1\x81\xD0\xBA\xD0\xB0\xD1\x8F, \xD0\xB4\xD0\xBE\xD0\xBC 7/O=\xD0\x9C\xD0\xB8\xD0\xBD\xD0\xBA\xD0\xBE\xD0\xBC\xD1\x81\xD0\xB2\xD1\x8F\xD0\xB7\xD1\x8C \xD0\xA0\xD0\xBE\xD1\x81\xD1\x81\xD0\xB8\xD0\xB8/OGRN=1047702026701/INN=007710474375/CN=\xD0\x9C\xD0\xB8\xD0\xBD\xD0\xBA\xD0\xBE\xD0\xBC\xD1\x81\xD0\xB2\xD1\x8F\xD0\xB7\xD1\x8C \xD0\xA0\xD0\xBE\xD1\x81\xD1\x81\xD0\xB8\xD0\xB8
Client Certificate Types: GOST01 Sign, UNKNOWN (238),, UNKNOWN (239),
Requested Signature Algorithms: RSA+SHA512:DSA+SHA512:ECDSA+SHA512:RSA+SHA384:DSA+SHA384:ECDSA+SHA384:RSA+SHA256:DSA+SHA256:ECDSA+SHA256:RSA+SHA224:DSA+SHA224:ECDSA+SHA224:RSA+SHA1:DSA+SHA1:ECDSA+SHA1:0xED+md_gost94:0xEE+md_gost12_256:0xEF+md_gost12_512
Shared Requested Signature Algorithms: RSA+SHA512:DSA+SHA512:ECDSA+SHA512:RSA+SHA384:DSA+SHA384:ECDSA+SHA384:RSA+SHA256:DSA+SHA256:ECDSA+SHA256:RSA+SHA224:DSA+SHA224:ECDSA+SHA224:RSA+SHA1:DSA+SHA1:ECDSA+SHA1:0xED+md_gost94:0xEE+md_gost12_256:0xEF+md_gost12_512
---
SSL handshake has read 2926 bytes and written 406 bytes
Verification: OK
---
New, TLSv1.0, Cipher is GOST2012-GOST8912-GOST8912
Server public key is 512 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : GOST2012-GOST8912-GOST8912
    Session-ID:
    Session-ID-ctx:
    Master-Key: B04CAF6E0E3E36E1F05B4E759BCF5611F1F17D61FC4103D9A3CBBEC8FE8889377B8C41B8A8D30D59A5E301B30CC2F380
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1568961524
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
---
[root@http4 amd64]#