$ openssl s_client -connect lists.buildbo                                                                                                                                                             t.net:443 -status -servername lists.buildbot.net
CONNECTED(00000003)
depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify return:1
depth=0 CN = lists.buildbot.net
verify return:1
OCSP response:
======================================
OCSP Response Data:
    OCSP Response Status: trylater (0x3)
======================================
---
Certificate chain
 0 s:/CN=lists.buildbot.net
   i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
 1 s:/CN=lists.buildbot.net
   i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
 2 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
   i:/O=Digital Signature Trust Co./CN=DST Root CA X3
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/CN=lists.buildbot.net
issuer=/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
---
No client certificate CA names sent
Peer signing digest: SHA512
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 4537 bytes and written 507 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-SHA256
    Session-ID: C54BBAE576B736F215542BE0F2E899110DAF00DB7E924A3CF7DF9E9261474404
    Session-ID-ctx:
    Master-Key: BAF23E321513E06F6F222FBE5F9F6D05776123D051E0F65FE8012E7C63859E59                                                                                                                                                             F7B9A9F0056BA69296CBF37A374A243E
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - d7 80 f1 c2 e6 b5 50 75-38 68 00 80 3c 70 f6 b8   ......Pu8h..<p..
    0010 - c6 c1 5c 93 6d 4f 53 e5-06 e2 be 7f 82 c3 c6 5c   ..\.mOS........\
    0020 - 4e c5 e4 28 64 d2 9a 19-cc 9c e5 e8 51 2b ea 24   N..(d.......Q+.$
    0030 - ca 8a 87 ed c3 48 30 f6-41 10 29 e6 09 8f 91 69   .....H0.A.)....i
    0040 - 71 b2 e7 5a cd 64 f1 22-b4 68 09 78 8d 4a d6 76   q..Z.d.".h.x.J.v
    0050 - cc f2 38 5b 00 68 78 df-8b 04 7b 46 e3 b7 1a 5c   ..8[.hx...{F...\
    0060 - fd 11 dd 2c 90 be 93 7f-9c d2 7d 08 d9 67 17 e9   ...,......}..g..
    0070 - 6c 9d 4c 4a 1c 6c 3d 59-d1 d9 10 83 21 b0 55 eb   l.LJ.l=Y....!.U.
    0080 - d5 7f 10 80 3a 50 1e c2-96 0c ba 65 d5 46 c9 d1   ....:P.....e.F..
    0090 - 11 fe 8c 02 44 63 08 61-d9 67 41 c3 62 9d 93 15   ....Dc.a.gA.b...
    00a0 - a3 02 ab 3d 41 21 86 2c-26 2f 3b f6 93 5b 6c d9   ...=A!.,&/;..[l.
    00b0 - 93 b7 f3 ea a2 15 c4 20-68 f3 2b ad e1 1d f1 eb   ....... h.+.....
    00c0 - 30 23 79 8e 80 7f 80 1a-68 60 9f 70 56 4f 41 05   0#y.....h`.pVOA.

    Start Time: 1493741825
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
---
closed
cmouse@mordor:~/src/weakforced (master)$ openssl s_client -connect lists.buildbot.net:443 -status -servername lists.buildbot.net
CONNECTED(00000003)
depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify return:1
depth=0 CN = lists.buildbot.net
verify return:1
OCSP response:
======================================
OCSP Response Data:
    OCSP Response Status: trylater (0x3)
======================================
---
Certificate chain
 0 s:/CN=lists.buildbot.net
   i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
 1 s:/CN=lists.buildbot.net
   i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
 2 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
   i:/O=Digital Signature Trust Co./CN=DST Root CA X3
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISA8gA/i4meIEStIRIeu9iSHiLMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA0MDQxNDU2MDBaFw0x
NzA3MDMxNDU2MDBaMB0xGzAZBgNVBAMTEmxpc3RzLmJ1aWxkYm90Lm5ldDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANCYU16TvmGkWdRWYTSVn3AdvcSI
ptPywg9SCfZhbp3eASlhcTefgU+ucgLqsANGFi4vASVpXMSQRk+sONWxy5qzFAr2
qKOnWcYLszpMR+fsiTGK0jStP3CYO62/aaHdEQUoeejAGV3hSjtlwvJe6YKcwLOt
YjOpOfHYZgnGuCaNF4rlETZlQ+aqFtgMI/1+gpF9TTfeQLnOyfj979YOAa5RRQfN
y4/Eq7DFg7Npie1ZOLlgqQKvyuaP7zoCe/UlQMunWA2n7nKBR54R4T+o64Rz6juM
T0DN1AxG5mc9C5Pb6490MBPp+xcvN/Ji9ABhQwPhJrk58lOK1PfiGvIX0cECAwEA
AaOCAhMwggIPMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUk9VUqjUFwpu9Tb2j1QxW
cAHmv/UwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYBBQUH
AQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZy8wHQYDVR0RBBYwFIISbGlzdHMuYnVpbGRib3QubmV0MIH+BgNVHSAE
gfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhp
cyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5n
IFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZp
Y2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVw
b3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAFEDhB0UQZZ74CW5h9SMwgmkTFfC
1nSdYZrEcbWDyZxgffx72YMVn1eBbAwFKtuW+7rBTzgygKbxVrHOLyyeSSjd1t10
0iWlaDtxAABHvLBLbF+YdH/uNQBbLWmgm8L+V7t1MavKXA9QFKBI425imN8wpcuR
cTOmPdB5QQJ5TQV98czmrQCzw8p/0Pmm7VpILxW4bu+tS+BkyrUujwT4o/pVnU31
Zg6YglEX0xz8kdnPyXCuK73fOLJOt2Jv+ihhA2ep1kkAgCTZxOaLjWDAfP8v61oZ
29v5IMKHnPmgZHfXbkLITnXni7qQnIY4qcf3pV6gxynnJMSZO/J4K8fFk4g=
-----END CERTIFICATE-----
subject=/CN=lists.buildbot.net
issuer=/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
---
No client certificate CA names sent
Peer signing digest: SHA512
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 4537 bytes and written 507 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-SHA256
    Session-ID: 2D865DCBDA070EDE7C94B9E15C73ADDE9D450860D8FEDD1B41C9B5541CC6FB13
    Session-ID-ctx:
    Master-Key: 4BAD934CD82FBDC75BA1B84A07E142718D38536F590F2861A00487B9A5830C33379679FA7EC05BFAEEFDC97B56A0677B
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - d7 80 f1 c2 e6 b5 50 75-38 68 00 80 3c 70 f6 b8   ......Pu8h..<p..
    0010 - 8a f0 23 88 0d 90 e1 0c-0a 55 8c 92 78 17 a3 8b   ..#......U..x...
    0020 - 52 5c 3f 4e 65 d9 2c de-4f b9 29 38 76 9b 6e 65   R\?Ne.,.O.)8v.ne
    0030 - 2c 2e 88 0c 4b 41 82 0e-41 77 20 60 73 d9 8a 3b   ,...KA..Aw `s..;
    0040 - a2 64 a6 3f fb d7 bf fa-a3 95 89 f1 f4 d8 d9 b8   .d.?............
    0050 - fe 96 1c 95 0b ff 4f 2d-85 36 e7 4c 53 55 84 17   ......O-.6.LSU..
    0060 - 54 d2 64 93 0d fe 0d f2-89 9d fe 91 b5 b9 1e d8   T.d.............
    0070 - 36 ff 00 d3 72 fa 94 6b-10 92 6b 7c 57 87 f1 a6   6...r..k..k|W...
    0080 - bd d6 1b b0 c5 6b 15 18-50 f7 9a 9a 28 0b cc b9   .....k..P...(...
    0090 - a4 c0 6e 83 fa 5b 12 e0-97 ba 6d 83 20 53 e9 5d   ..n..[....m. S.]
    00a0 - a6 b4 94 48 43 e7 69 4d-29 5c d9 9c af 39 c4 9e   ...HC.iM)\...9..
    00b0 - 3f 06 e9 a0 14 e7 5b d0-01 0e da 34 28 8a 85 0a   ?.....[....4(...
    00c0 - 4f 85 6d b4 00 88 04 55-45 a7 69 1a 9e c9 cc fe   O.m....UE.i.....

    Start Time: 1493741909
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
---