depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
verify return:1
depth=1 C = US, O = DigiCert Inc, CN = DigiCert Global CA G2
verify return:1
depth=0 CN = www.amazon.cn
verify return:1
CONNECTED(00000003)
OCSP response:
======================================
OCSP Response Data:
OCSP Response Status: successful (0x0)
Response Type: Basic OCSP Response
Version: 1 (0x0)
Responder Id: 246E2B2DD06A925151256901AA9A47A689E74020
Produced At: Mar 28 17:13:06 2024 GMT
Responses:
Certificate ID:
Hash Algorithm: sha1
Issuer Name Hash: A87E303106E4E88565CFE952598FA6DA7C00532F
Issuer Key Hash: 246E2B2DD06A925151256901AA9A47A689E74020
Serial Number: 080DF79DE6BC97E011C6DF13061B1D0D
Cert Status: good
This Update: Mar 28 16:57:01 2024 GMT
Next Update: Apr 4 15:57:01 2024 GMT
Signature Algorithm: sha256WithRSAEncryption
c5:c3:38:02:e9:e4:14:a5:02:a4:8b:c7:3a:6c:2a:bd:4d:4c:
7b:eb:00:be:cb:3e:e2:ec:94:8a:f0:c0:cb:f6:c6:42:bf:e0:
96:3f:25:ac:d9:4e:dd:31:92:0e:cf:59:ba:e2:80:07:ed:83:
8f:9c:db:ce:b8:59:99:f6:4b:ff:e6:69:f8:da:70:d4:c8:f0:
a8:bc:52:3a:1e:63:87:ed:b5:2b:dc:a0:d0:c8:22:69:55:4c:
77:54:95:cc:94:f9:18:47:de:a4:25:d8:77:00:2e:94:a8:e5:
ed:3d:12:33:fc:99:90:17:bb:4e:34:e1:ba:fb:99:8a:ce:ce:
94:c3:c0:78:b0:a4:b0:1a:ed:b1:c3:6b:b2:0a:1d:49:7e:20:
fb:d0:4e:cb:54:c2:4a:af:b8:2a:f3:97:68:8f:6e:96:ec:89:
b5:2f:d9:f7:c7:c8:02:35:eb:57:b7:b3:3d:68:be:c8:4d:b5:
34:35:d2:1a:3b:1a:3a:da:ac:21:74:f3:5a:ff:2d:e2:ea:7f:
39:3d:6a:20:85:6c:5e:e4:37:62:12:9d:16:66:30:ff:be:2d:
c3:c2:d6:78:49:27:65:e4:96:cf:8d:21:85:a5:c0:5b:96:95:
96:eb:01:38:b3:f7:21:77:eb:56:d9:9c:e8:9f:46:9b:09:c6:
6b:b8:02:3e
======================================
---
Certificate chain
0 s:CN = www.amazon.cn
i:C = US, O = DigiCert Inc, CN = DigiCert Global CA G2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
1 s:C = US, O = DigiCert Inc, CN = DigiCert Global CA G2
i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2 s:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
i:C = US, O = "VeriSign, Inc.", OU = VeriSign Trust Network, OU = "(c) 2006 VeriSign, Inc. - For authorized use only", CN = VeriSign Class 3 Public Primary Certification Authority - G5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = www.amazon.cn
issuer=C = US, O = DigiCert Inc, CN = DigiCert Global CA G2
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 5083 bytes and written 413 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES128-GCM-SHA256
Session-ID: 61CA7B84BCBAFC731BD0C200F36A27D173C3E9DF6EE789963F921C8C26CE81C7
Session-ID-ctx:
Master-Key: 443F5C166AA639F2C4CDE58425D1C98C50C9FCDB5C6E2BDD908D20BA0E7C9FE2F78E7BE4FD154ED383CDAEF4E473D3D0
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1711722556
Timeout : 7200 (sec)
Verify return code: 0 (ok)
Extended master secret: yes
---
DONE