$ openssl s_client -connect lists.buildbo t.net:443 -status -servername lists.buildbot.net CONNECTED(00000003) depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3 verify return:1 depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 verify return:1 depth=0 CN = lists.buildbot.net verify return:1 OCSP response: ====================================== OCSP Response Data: OCSP Response Status: trylater (0x3) ====================================== --- Certificate chain 0 s:/CN=lists.buildbot.net i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 1 s:/CN=lists.buildbot.net i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 2 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 i:/O=Digital Signature Trust Co./CN=DST Root CA X3 --- Server certificate -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISA8gA/i4meIEStIRIeu9iSHiLMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA0MDQxNDU2MDBaFw0x NzA3MDMxNDU2MDBaMB0xGzAZBgNVBAMTEmxpc3RzLmJ1aWxkYm90Lm5ldDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANCYU16TvmGkWdRWYTSVn3AdvcSI ptPywg9SCfZhbp3eASlhcTefgU+ucgLqsANGFi4vASVpXMSQRk+sONWxy5qzFAr2 qKOnWcYLszpMR+fsiTGK0jStP3CYO62/aaHdEQUoeejAGV3hSjtlwvJe6YKcwLOt YjOpOfHYZgnGuCaNF4rlETZlQ+aqFtgMI/1+gpF9TTfeQLnOyfj979YOAa5RRQfN y4/Eq7DFg7Npie1ZOLlgqQKvyuaP7zoCe/UlQMunWA2n7nKBR54R4T+o64Rz6juM T0DN1AxG5mc9C5Pb6490MBPp+xcvN/Ji9ABhQwPhJrk58lOK1PfiGvIX0cECAwEA AaOCAhMwggIPMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUk9VUqjUFwpu9Tb2j1QxW cAHmv/UwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYBBQUH AQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wHQYDVR0RBBYwFIISbGlzdHMuYnVpbGRib3QubmV0MIH+BgNVHSAE gfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhp cyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5n IFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZp Y2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVw b3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAFEDhB0UQZZ74CW5h9SMwgmkTFfC 1nSdYZrEcbWDyZxgffx72YMVn1eBbAwFKtuW+7rBTzgygKbxVrHOLyyeSSjd1t10 0iWlaDtxAABHvLBLbF+YdH/uNQBbLWmgm8L+V7t1MavKXA9QFKBI425imN8wpcuR cTOmPdB5QQJ5TQV98czmrQCzw8p/0Pmm7VpILxW4bu+tS+BkyrUujwT4o/pVnU31 Zg6YglEX0xz8kdnPyXCuK73fOLJOt2Jv+ihhA2ep1kkAgCTZxOaLjWDAfP8v61oZ 29v5IMKHnPmgZHfXbkLITnXni7qQnIY4qcf3pV6gxynnJMSZO/J4K8fFk4g= -----END CERTIFICATE----- subject=/CN=lists.buildbot.net issuer=/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 --- No client certificate CA names sent Peer signing digest: SHA512 Server Temp Key: ECDH, P-256, 256 bits --- SSL handshake has read 4537 bytes and written 507 bytes --- New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-SHA256 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES128-SHA256 Session-ID: C54BBAE576B736F215542BE0F2E899110DAF00DB7E924A3CF7DF9E9261474404 Session-ID-ctx: Master-Key: BAF23E321513E06F6F222FBE5F9F6D05776123D051E0F65FE8012E7C63859E59 F7B9A9F0056BA69296CBF37A374A243E Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 300 (seconds) TLS session ticket: 0000 - d7 80 f1 c2 e6 b5 50 75-38 68 00 80 3c 70 f6 b8 ......Pu8h..<p.. 0010 - c6 c1 5c 93 6d 4f 53 e5-06 e2 be 7f 82 c3 c6 5c ..\.mOS........\ 0020 - 4e c5 e4 28 64 d2 9a 19-cc 9c e5 e8 51 2b ea 24 N..(d.......Q+.$ 0030 - ca 8a 87 ed c3 48 30 f6-41 10 29 e6 09 8f 91 69 .....H0.A.)....i 0040 - 71 b2 e7 5a cd 64 f1 22-b4 68 09 78 8d 4a d6 76 q..Z.d.".h.x.J.v 0050 - cc f2 38 5b 00 68 78 df-8b 04 7b 46 e3 b7 1a 5c ..8[.hx...{F...\ 0060 - fd 11 dd 2c 90 be 93 7f-9c d2 7d 08 d9 67 17 e9 ...,......}..g.. 0070 - 6c 9d 4c 4a 1c 6c 3d 59-d1 d9 10 83 21 b0 55 eb l.LJ.l=Y....!.U. 0080 - d5 7f 10 80 3a 50 1e c2-96 0c ba 65 d5 46 c9 d1 ....:P.....e.F.. 0090 - 11 fe 8c 02 44 63 08 61-d9 67 41 c3 62 9d 93 15 ....Dc.a.gA.b... 00a0 - a3 02 ab 3d 41 21 86 2c-26 2f 3b f6 93 5b 6c d9 ...=A!.,&/;..[l. 00b0 - 93 b7 f3 ea a2 15 c4 20-68 f3 2b ad e1 1d f1 eb ....... h.+..... 00c0 - 30 23 79 8e 80 7f 80 1a-68 60 9f 70 56 4f 41 05 0#y.....h`.pVOA. Start Time: 1493741825 Timeout : 300 (sec) Verify return code: 0 (ok) --- closed cmouse@mordor:~/src/weakforced (master)$ openssl s_client -connect lists.buildbot.net:443 -status -servername lists.buildbot.net CONNECTED(00000003) depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3 verify return:1 depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 verify return:1 depth=0 CN = lists.buildbot.net verify return:1 OCSP response: ====================================== OCSP Response Data: OCSP Response Status: trylater (0x3) ====================================== --- Certificate chain 0 s:/CN=lists.buildbot.net i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 1 s:/CN=lists.buildbot.net i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 2 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 i:/O=Digital Signature Trust Co./CN=DST Root CA X3 --- Server certificate -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISA8gA/i4meIEStIRIeu9iSHiLMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA0MDQxNDU2MDBaFw0x NzA3MDMxNDU2MDBaMB0xGzAZBgNVBAMTEmxpc3RzLmJ1aWxkYm90Lm5ldDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANCYU16TvmGkWdRWYTSVn3AdvcSI ptPywg9SCfZhbp3eASlhcTefgU+ucgLqsANGFi4vASVpXMSQRk+sONWxy5qzFAr2 qKOnWcYLszpMR+fsiTGK0jStP3CYO62/aaHdEQUoeejAGV3hSjtlwvJe6YKcwLOt YjOpOfHYZgnGuCaNF4rlETZlQ+aqFtgMI/1+gpF9TTfeQLnOyfj979YOAa5RRQfN y4/Eq7DFg7Npie1ZOLlgqQKvyuaP7zoCe/UlQMunWA2n7nKBR54R4T+o64Rz6juM T0DN1AxG5mc9C5Pb6490MBPp+xcvN/Ji9ABhQwPhJrk58lOK1PfiGvIX0cECAwEA AaOCAhMwggIPMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUk9VUqjUFwpu9Tb2j1QxW cAHmv/UwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYBBQUH AQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wHQYDVR0RBBYwFIISbGlzdHMuYnVpbGRib3QubmV0MIH+BgNVHSAE gfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhp cyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5n IFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZp Y2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVw b3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAFEDhB0UQZZ74CW5h9SMwgmkTFfC 1nSdYZrEcbWDyZxgffx72YMVn1eBbAwFKtuW+7rBTzgygKbxVrHOLyyeSSjd1t10 0iWlaDtxAABHvLBLbF+YdH/uNQBbLWmgm8L+V7t1MavKXA9QFKBI425imN8wpcuR cTOmPdB5QQJ5TQV98czmrQCzw8p/0Pmm7VpILxW4bu+tS+BkyrUujwT4o/pVnU31 Zg6YglEX0xz8kdnPyXCuK73fOLJOt2Jv+ihhA2ep1kkAgCTZxOaLjWDAfP8v61oZ 29v5IMKHnPmgZHfXbkLITnXni7qQnIY4qcf3pV6gxynnJMSZO/J4K8fFk4g= -----END CERTIFICATE----- subject=/CN=lists.buildbot.net issuer=/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 --- No client certificate CA names sent Peer signing digest: SHA512 Server Temp Key: ECDH, P-256, 256 bits --- SSL handshake has read 4537 bytes and written 507 bytes --- New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-SHA256 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES128-SHA256 Session-ID: 2D865DCBDA070EDE7C94B9E15C73ADDE9D450860D8FEDD1B41C9B5541CC6FB13 Session-ID-ctx: Master-Key: 4BAD934CD82FBDC75BA1B84A07E142718D38536F590F2861A00487B9A5830C33379679FA7EC05BFAEEFDC97B56A0677B Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 300 (seconds) TLS session ticket: 0000 - d7 80 f1 c2 e6 b5 50 75-38 68 00 80 3c 70 f6 b8 ......Pu8h..<p.. 0010 - 8a f0 23 88 0d 90 e1 0c-0a 55 8c 92 78 17 a3 8b ..#......U..x... 0020 - 52 5c 3f 4e 65 d9 2c de-4f b9 29 38 76 9b 6e 65 R\?Ne.,.O.)8v.ne 0030 - 2c 2e 88 0c 4b 41 82 0e-41 77 20 60 73 d9 8a 3b ,...KA..Aw `s..; 0040 - a2 64 a6 3f fb d7 bf fa-a3 95 89 f1 f4 d8 d9 b8 .d.?............ 0050 - fe 96 1c 95 0b ff 4f 2d-85 36 e7 4c 53 55 84 17 ......O-.6.LSU.. 0060 - 54 d2 64 93 0d fe 0d f2-89 9d fe 91 b5 b9 1e d8 T.d............. 0070 - 36 ff 00 d3 72 fa 94 6b-10 92 6b 7c 57 87 f1 a6 6...r..k..k|W... 0080 - bd d6 1b b0 c5 6b 15 18-50 f7 9a 9a 28 0b cc b9 .....k..P...(... 0090 - a4 c0 6e 83 fa 5b 12 e0-97 ba 6d 83 20 53 e9 5d ..n..[....m. S.] 00a0 - a6 b4 94 48 43 e7 69 4d-29 5c d9 9c af 39 c4 9e ...HC.iM)\...9.. 00b0 - 3f 06 e9 a0 14 e7 5b d0-01 0e da 34 28 8a 85 0a ?.....[....4(... 00c0 - 4f 85 6d b4 00 88 04 55-45 a7 69 1a 9e c9 cc fe O.m....UE.i..... Start Time: 1493741909 Timeout : 300 (sec) Verify return code: 0 (ok) ---