Skip to content

Instantly share code, notes, and snippets.

@jsha
Created June 4, 2014 00:59
Show Gist options
  • Save jsha/77218a9ce5ddd83f3f69 to your computer and use it in GitHub Desktop.
Save jsha/77218a9ce5ddd83f3f69 to your computer and use it in GitHub Desktop.
$ openssl s_client -starttls smtp -connect mx1.comcast.com:25 -showcerts -CApath /usr/share/ca-certificates/mozilla/
CONNECTED(00000003)
depth=0 C = US, postalCode = 19103, ST = PA, L = Philadelphia, street = 1 Comcast Center, O = Comcast Corporation, OU = Hosted by Comcast Corporation, OU = EliteSSL, CN = mx1.comcast.com
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 C = US, postalCode = 19103, ST = PA, L = Philadelphia, street = 1 Comcast Center, O = Comcast Corporation, OU = Hosted by Comcast Corporation, OU = EliteSSL, CN = mx1.comcast.com
verify error:num=27:certificate not trusted
verify return:1
depth=0 C = US, postalCode = 19103, ST = PA, L = Philadelphia, street = 1 Comcast Center, O = Comcast Corporation, OU = Hosted by Comcast Corporation, OU = EliteSSL, CN = mx1.comcast.com
verify error:num=21:unable to verify the first certificate
verify return:1
@dlugo
Copy link

dlugo commented Jun 4, 2014

jsha - Can you try updating your root certificate bundle?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment