CONNECTED(00000003) --- Certificate chain 0 s:CN = ldap-labs.eqiad.wikimedia.org i:C = US, O = Let's Encrypt, CN = R3 --- Server certificate -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISBEjj7CwEOFV72TXHSky8ormTMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTAxMDMxMzAwMjhaFw0yMTA0MDMxMzAwMjhaMCgxJjAkBgNVBAMT HWxkYXAtbGFicy5lcWlhZC53aWtpbWVkaWEub3JnMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAwZY+Zfbi2i+JECmfoVcKMy6T+/G51i4CgMb8dFYKi5OV 2YioASSE1IclnSk+53r/NZ6kQ6IynSJ/lw+dZlfWWgvWL4Vh1lbIjRMOxJfYbc3N ECHvgBpmqGHG2SCfom8AjXtDTO8PbrXSG73vHK/bjqbCFEW7lN8uE4lVU43WdxZs Zdo1cXGHdZE7i0N2Kk6pYKS34QgzXw8CqTCqH7xQPXXdbzC5+uDZp2C2zFdij2Rz KkzCflSZv42z7KOa1dXhW3vTautfGn3jhXfAYemWkfAU5WFK/o4Eyv8cZuYtC1LQ Q+I1s4ggeFm73O+hgCRhQSbIaGr5xf9DR2cJGDtTQwIDAQABo4ICsjCCAq4wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBTgWE/9l0MCvtV100QTJbth4OuX7TAfBgNVHSME GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov L3IzLmkubGVuY3Iub3JnLzCBgQYDVR0RBHoweIIdbGRhcC1sYWJzLmNvZGZ3Lndp a2ltZWRpYS5vcmeCHWxkYXAtbGFicy5lcWlhZC53aWtpbWVkaWEub3JnghtsZGFw LXJvLmNvZGZ3Lndpa2ltZWRpYS5vcmeCG2xkYXAtcm8uZXFpYWQud2lraW1lZGlh Lm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkC BAIEgfUEgfIA8AB2AFzcQ5L+5qtFRLFemtRW5hA3+9X6R9yhc5SyXub2xw7KAAAB dsiMpCoAAAQDAEcwRQIhAIFOgK/YU630K1j90sgyp22wXop0ineqUX8VNCL+79Ju AiBXUt6AW97YcSvlIxXdX1KSHiNn4PdYbCw/yLtVU57qgQB2AH0+8viP/4hVaCTC wMqeUol5K8UOeAl/LmqXaJl+IvDXAAABdsiMpE0AAAQDAEcwRQIgYfihZbZOgeL+ a+hJYWdRHI0bPmzS15cz1e9solCtQEECIQCUSAaJWpkrg3i904Oxr0l1tj88+wTp m84qhOjjNGDQ2jANBgkqhkiG9w0BAQsFAAOCAQEAEX/lwZf9XRFLzZ90TuyWMLF7 vTO2dRBNlaGqOSKMMyNSzZW6L8gxu1jtFLmw74vlcdx6gnQs/EmTkuHxU7W1q/k1 B6VRUZgkcr4PYlAY/0Et6ccbc6i2rSNcbg+IcboGQFj5+ZRRILyKVI7EhHNnS6GH U1pmps2+8dRAkqKpCadmJscXYGpqoaKWB/jSRU/jqg3/uN5tozXUx0rvGHEAXOE9 gfvM5CyiM06IQNdfP5M4FPemIWrWg3XWusmLASq1HUti6ioZfGjAXmKt8KpKQMtO CwFbg4ZZiyGW7/k3U2APITM/vh0LpolT1aAy/OI2UHkoBcQBfhrYud3+CSJ/iw== -----END CERTIFICATE----- subject=CN = ldap-labs.eqiad.wikimedia.org issuer=C = US, O = Let's Encrypt, CN = R3 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA-PSS Server Temp Key: X25519, 253 bits --- SSL handshake has read 2008 bytes and written 394 bytes Verification error: unable to verify the first certificate --- New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 2048 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 21 (unable to verify the first certificate) ---