Skip to content

Instantly share code, notes, and snippets.

@pdjota
Created September 28, 2011 18:30
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save pdjota/1248790 to your computer and use it in GitHub Desktop.
Save pdjota/1248790 to your computer and use it in GitHub Desktop.
OpenSSL response to Experian Connection
openssl s_client -connect ss3.experian.com:443 -CApath /etc/ssl/certs/
CONNECTED(00000003)
depth=2 /C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority - G2/OU=(c) 1998 VeriSign, Inc. - For authorized use only/OU=VeriSign Trust Network
verify return:1
depth=1 /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)09/CN=VeriSign Class 3 Secure Server CA - G2
verify return:1
depth=0 /C=US/ST=Texas/L=mckinney/O=Experian Information Solutions Inc/OU=Systems Integration/OU=Terms of use at www.verisign.com/rpa (c)05/CN=ss3.experian.com
verify return:1
---
Certificate chain
0 s:/C=US/ST=Texas/L=mckinney/O=Experian Information Solutions Inc/OU=Systems Integration/OU=Terms of use at www.verisign.com/rpa (c)05/CN=ss3.experian.com
i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)09/CN=VeriSign Class 3 Secure Server CA - G2
1 s:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)09/CN=VeriSign Class 3 Secure Server CA - G2
i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority - G2/OU=(c) 1998 VeriSign, Inc. - For authorized use only/OU=VeriSign Trust Network
2 s:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority - G2/OU=(c) 1998 VeriSign, Inc. - For authorized use only/OU=VeriSign Trust Network
i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority - G2/OU=(c) 1998 VeriSign, Inc. - For authorized use only/OU=VeriSign Trust Network
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=US/ST=Texas/L=mckinney/O=Experian Information Solutions Inc/OU=Systems Integration/OU=Terms of use at www.verisign.com/rpa (c)05/CN=ss3.experian.com
issuer=/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)09/CN=VeriSign Class 3 Secure Server CA - G2
---
No client certificate CA names sent
---
SSL handshake has read 3891 bytes and written 293 bytes
---
New, TLSv1/SSLv3, Cipher is AES256-SHA
Server public key is 1024 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : AES256-SHA
Session-ID: 06A1BCCC727579E0AFC452CC4023C721B150AFE376956222C6E60F7292A2C6CD
Session-ID-ctx:
Master-Key: 858588F2C5DD635626ACDE0E2154F215E52016147AACC6D8FBFCCFDF29BAB62F0F952498FD150256E3B06493D20AC46B
Key-Arg : None
Start Time: 1317237621
Timeout : 300 (sec)
Verify return code: 0 (ok)
---
openssl s_client -CApath /etc/ssl/certs/ -connect dm1.experian.com:443
CONNECTED(00000003)
depth=0 /C=US/ST=Texas/L=Mckinney/O=Experian Information Solutions Inc/OU=Systems Integration/OU=Terms of use at www.verisign.com/rpa (c)05/CN=dm1.experian.com
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 /C=US/ST=Texas/L=Mckinney/O=Experian Information Solutions Inc/OU=Systems Integration/OU=Terms of use at www.verisign.com/rpa (c)05/CN=dm1.experian.com
verify error:num=27:certificate not trusted
verify return:1
depth=0 /C=US/ST=Texas/L=Mckinney/O=Experian Information Solutions Inc/OU=Systems Integration/OU=Terms of use at www.verisign.com/rpa (c)05/CN=dm1.experian.com
verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
0 s:/C=US/ST=Texas/L=Mckinney/O=Experian Information Solutions Inc/OU=Systems Integration/OU=Terms of use at www.verisign.com/rpa (c)05/CN=dm1.experian.com
i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgIQR6vziVVmZry33YOUNtti+zANBgkqhkiG9w0BAQUFADCB
tTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug
YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDEvMC0GA1UEAxMm
VmVyaVNpZ24gQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzMwHhcNMTEwNTA5
MDAwMDAwWhcNMTMwNTA4MjM1OTU5WjCByzELMAkGA1UEBhMCVVMxDjAMBgNVBAgT
BVRleGFzMREwDwYDVQQHFAhNY2tpbm5leTErMCkGA1UEChQiRXhwZXJpYW4gSW5m
b3JtYXRpb24gU29sdXRpb25zIEluYzEcMBoGA1UECxQTU3lzdGVtcyBJbnRlZ3Jh
dGlvbjEzMDEGA1UECxQqVGVybXMgb2YgdXNlIGF0IHd3dy52ZXJpc2lnbi5jb20v
cnBhIChjKTA1MRkwFwYDVQQDFBBkbTEuZXhwZXJpYW4uY29tMIGfMA0GCSqGSIb3
DQEBAQUAA4GNADCBiQKBgQC9ufNGhhXp/ES8XrfU7rK3fykhoOBZtyaEOvDJhXMw
SNoGQZfy+GfToJJkuEhVypZRCPEhemrKEqSVmcLO3wJnzE822+bcblNXllQ3+Nug
HuUNtSUy89sAom+wlF0IAFBLOwfdhtUFllGiZhKAa9gPPrCCAiix5/DE6+FgXQQa
kQIDAQABo4IB0TCCAc0wCQYDVR0TBAIwADALBgNVHQ8EBAMCBaAwRQYDVR0fBD4w
PDA6oDigNoY0aHR0cDovL1NWUlNlY3VyZS1HMy1jcmwudmVyaXNpZ24uY29tL1NW
UlNlY3VyZUczLmNybDBEBgNVHSAEPTA7MDkGC2CGSAGG+EUBBxcDMCowKAYIKwYB
BQUHAgEWHGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9ycGEwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFA1EXBZTRMGCfh0gqyX0AWPY
vnmlMHYGCCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AudmVy
aXNpZ24uY29tMEAGCCsGAQUFBzAChjRodHRwOi8vU1ZSU2VjdXJlLUczLWFpYS52
ZXJpc2lnbi5jb20vU1ZSU2VjdXJlRzMuY2VyMG4GCCsGAQUFBwEMBGIwYKFeoFww
WjBYMFYWCWltYWdlL2dpZjAhMB8wBwYFKw4DAhoEFEtruSiWBgy70FI4mymsSweL
IQUYMCYWJGh0dHA6Ly9sb2dvLnZlcmlzaWduLmNvbS92c2xvZ28xLmdpZjANBgkq
hkiG9w0BAQUFAAOCAQEAko0rdLbzb4Srz0JOYEQF7rqfnWSBWxFpD/ZyqeNFibY1
VM65MBV4RK7018KsHDei1wEIcAqo8NWoO7ZV6LaaV9r6R8fj8vhVXgCT0/0W2hWh
7Y2f7PgBGW0nT16Yy2sYZrYXDy+uwDPaVnm1mAChIjw7BwS8RueW70UorTG/PfK7
I/d+VJHx6ZIEwZsWKRxiQ1Rfh4cNO613YnCoInVcTcztTBP59wUjgeq3tF41a8m/
FcQOJGJ6dMlNzvGI9IAbBLtqZJmdkU5eR+UreCiA0wlSrcBwZfMfc4ksQ705zQcx
w1bfchYJniCaR+Ppl0tXEpucvEMh4kHcKUQ8uUu2Jg==
-----END CERTIFICATE-----
subject=/C=US/ST=Texas/L=Mckinney/O=Experian Information Solutions Inc/OU=Systems Integration/OU=Terms of use at www.verisign.com/rpa (c)05/CN=dm1.experian.com
issuer=/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3
---
No client certificate CA names sent
---
SSL handshake has read 1527 bytes and written 293 bytes
---
New, TLSv1/SSLv3, Cipher is AES256-SHA
Server public key is 1024 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : AES256-SHA
Session-ID: 72FCDA164D57A529F245BE130E9E35E3AC3FE974720F08D5AEE8F00D05D8EFB3
Session-ID-ctx:
Master-Key: 5BEC4387A4F503CC375312A767C24CFCC6AE8977FF71AB13C26D195B7398DEF219B48DCBD34D6DF7621F408E771CA34D
Key-Arg : None
Start Time: 1317233916
Timeout : 300 (sec)
Verify return code: 21 (unable to verify the first certificate)
---
closed
@Zuckonit
Copy link

Hi, have you solved this problem?
I meet a same one with yours. could you share the solution?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment