Here's the lovely thrice-blessed cert now can we change the subject??
😁😁😁😁
$ openssl s_client -connect mail.google.com:443
CONNECTED(00000003)
depth=2 C = US, O = Google Trust Services LLC, CN = GTS Root R1
verify return:1
depth=1 C = US, O = Google Trust Services LLC, CN = GTS CA 1C3
verify return:1
depth=0 CN = mail.google.com
verify return:1
---
Certificate chain
0 s:CN = mail.google.com
i:C = US, O = Google Trust Services LLC, CN = GTS CA 1C3
a:PKEY: id-ecPublicKey, 256 (bit); sigalg: RSA-SHA256
v:NotBefore: Jun 6 09:40:14 2022 GMT; NotAfter: Aug 29 09:40:13 2022 GMT
1 s:C = US, O = Google Trust Services LLC, CN = GTS CA 1C3
i:C = US, O = Google Trust Services LLC, CN = GTS Root R1
a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
v:NotBefore: Aug 13 00:00:42 2020 GMT; NotAfter: Sep 30 00:00:42 2027 GMT
2 s:C = US, O = Google Trust Services LLC, CN = GTS Root R1
i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
a:PKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA256
v:NotBefore: Jun 19 00:00:42 2020 GMT; NotAfter: Jan 28 00:00:42 2028 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIEmzCCA4OgAwIBAgIQC0FWpk5zyKIK8NsRj8FwvDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFDMzAeFw0yMjA2MDYwOTQwMTRaFw0yMjA4Mjkw
OTQwMTNaMBoxGDAWBgNVBAMTD21haWwuZ29vZ2xlLmNvbTBZMBMGByqGSM49AgEG
CCqGSM49AwEHA0IABO/kKjfobLT1QEj8f+aznuz03DQd4hYzL0fj+pjrTCZ36/JO
s74GWuyn7Qf5UY2q1GqkykEMEDGGJz27azN0sISjggJ6MIICdjAOBgNVHQ8BAf8E
BAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUyAacJSH4t3CBCw+dxxCIFQ/dUR8wHwYDVR0jBBgwFoAUinR/r4XN7pXNPZzQ
4kYU83E1HScwagYIKwYBBQUHAQEEXjBcMCcGCCsGAQUFBzABhhtodHRwOi8vb2Nz
cC5wa2kuZ29vZy9ndHMxYzMwMQYIKwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9y
ZXBvL2NlcnRzL2d0czFjMy5kZXIwLAYDVR0RBCUwI4IPbWFpbC5nb29nbGUuY29t
ghBpbmJveC5nb29nbGUuY29tMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB
1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cvZ3Rz
MWMzL2ZWSnhiVi1LdG1rLmNybDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ACl5
vvCeOTkh8FZzn2Old+W+V32cYAr4+U1dJlwlXceEAAABgTiZ19kAAAQDAEcwRQIg
ROVU6z2698zHeUviepTtSQY/x2p4uH5Gmjgozw80UbsCIQDAg+J9BjIKJX/bWnlQ
txRR1/QNdfjZujU1qEJGB8wlSwB2AFGjsPX9AXmcVm24N3iPDKR6zBsny/eeiEKa
Df7UiwXlAAABgTiZ1+kAAAQDAEcwRQIgOOw20YSoNcCvo/0drEwWu+ALGSQIsB46
001ESSkq5WoCIQCfkK5QbQ2Yc/hqZI7To0TQ1KmldIG3MCkfpJdR6tW3TDANBgkq
hkiG9w0BAQsFAAOCAQEAGIeNPebzTtCzqAdBiERpSjyjWZI8Y8t2SRn8SBjOiXar
snnvN4M6tQT0b9QA6MKJa+NxsIaNgkGv3WgaC5+b6ylr7pdedA+/rGzv7PcuMhgt
M5trN0+07nK3MG/iyAmNhqJcjRuwV5sa6DkSylb4VGSpaDcPsQ0JB46H4Ba/IF/m
l61+MAeKIVoW6hGlJCl1mNu8SAL0nBuh/6qmLhrO9VZXC2jSu6QHVtBSIxESqrEI
2+ceLvAXvc5Mz4Ix1cLjsnYUNLYYUQf2ep/6ziqp5kcrVF/CFGZA5ltZ6BMxFk7T
J1ojoHwVlVVNdnhuAN3GHC3MH9hcHxTaTf+lQBuwMg==
-----END CERTIFICATE-----
subject=CN = mail.google.com
issuer=C = US, O = Google Trust Services LLC, CN = GTS CA 1C3
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: ECDSA
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 4315 bytes and written 397 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 256 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
On Tue, Jul 5, 2022 at 7:56 AM Jim Oberholtzer <midrangel@xxxxxxxxxxxxxxxxx>
wrote:
Has anyone successfully managed to get the SSL certificate from gmail using
the QMGTOOLS options: 7, 1,1? "Retrieve SSL Certificate"
midrange.com
