On Mon, Jun 01, 2020 at 01:29:39AM +0200, Axel Beckert wrote: > OpenSSL 1.1.1g 21 Apr 2020 > → openssl s_client -connect mirror.sinavps.ch:443 > CONNECTED(00000003) > depth=3 C = SE, O = AddTrust AB, OU = AddTrust External TTP Network, CN = > AddTrust External CA Root > verify error:num=10:certificate has expired > notAfter=May 30 10:48:38 2020 GMT > verify return:1 > depth=3 C = SE, O = AddTrust AB, OU = AddTrust External TTP Network, CN = > AddTrust External CA Root > notAfter=May 30 10:48:38 2020 GMT > verify return:1 > depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, > CN = USERTrust RSA Certification Authority > verify error:num=10:certificate has expired > notAfter=May 30 10:48:38 2020 GMT > verify return:1 > depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, > CN = USERTrust RSA Certification Authority > notAfter=May 30 10:48:38 2020 GMT > verify return:1 > depth=1 C = US, ST = DE, L = Wilmington, O = "Globe Hosting, Inc.", CN = > GlobeSSL DV Certification Authority 2 > notAfter=Sep 9 23:59:59 2024 GMT > verify return:1 > depth=0 OU = Domain Control Validated, OU = Globe Standard SSL, CN = > mirror.sinavps.ch > notAfter=Jul 16 23:59:59 2021 GMT > verify return:1 > --- > Certificate chain > 0 s:OU = Domain Control Validated, OU = Globe Standard SSL, CN = > mirror.sinavps.ch > i:C = US, ST = DE, L = Wilmington, O = "Globe Hosting, Inc.", CN = > GlobeSSL DV Certification Authority 2 > 1 s:C = US, ST = DE, L = Wilmington, O = "Globe Hosting, Inc.", CN = > GlobeSSL DV Certification Authority 2 > i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN > = USERTrust RSA Certification Authority > 2 s:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN > = USERTrust RSA Certification Authority > i:C = SE, O = AddTrust AB, OU = AddTrust External TTP Network, CN = > AddTrust External CA Root > --- > [...] Verify return code: 0 (ok)
I think openssl's output is confusing, but it always has that "verify return:1" for each certificate at the top. Kurt
