# Pastebin EDcYJgZi
zas@jimmy:~$ echo 'GET /' |openssl s_client -servername musicbrainz.org -connect musicbrainz.org:443 -prexit -4
CONNECTED(00000003)
depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
verify return:1
depth=1 C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 3
verify return:1
depth=0 CN = *.musicbrainz.org
verify return:1
---
Certificate chain
 0 s:CN = *.musicbrainz.org
   i:C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 3
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA384
   v:NotBefore: Sep  8 00:00:00 2023 GMT; NotAfter: Oct  5 23:59:59 2024 GMT
 1 s:C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 3
   i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
   a:PKEY: rsaEncryption, 3072 (bit); sigalg: RSA-SHA384
   v:NotBefore: Aug  2 00:00:00 2023 GMT; NotAfter: Aug  1 23:59:59 2033 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=CN = *.musicbrainz.org
issuer=C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 3
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 3867 bytes and written 397 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE
---
Certificate chain
 0 s:CN = *.musicbrainz.org
   i:C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 3
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA384
   v:NotBefore: Sep  8 00:00:00 2023 GMT; NotAfter: Oct  5 23:59:59 2024 GMT
 1 s:C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 3
   i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
   a:PKEY: rsaEncryption, 3072 (bit); sigalg: RSA-SHA384
   v:NotBefore: Aug  2 00:00:00 2023 GMT; NotAfter: Aug  1 23:59:59 2033 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=CN = *.musicbrainz.org
issuer=C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 3
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 4025 bytes and written 449 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
zas@jimmy:~$ echo 'GET /' |openssl s_client -servername musicbrainz.org -connect musicbrainz.org:443 -prexit -6
CONNECTED(00000003)
depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
verify return:1
depth=1 C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 3
verify return:1
depth=0 CN = *.musicbrainz.org
verify return:1
---
Certificate chain
 0 s:CN = *.musicbrainz.org
   i:C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 3
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA384
   v:NotBefore: Sep  8 00:00:00 2023 GMT; NotAfter: Oct  5 23:59:59 2024 GMT
 1 s:C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 3
   i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
   a:PKEY: rsaEncryption, 3072 (bit); sigalg: RSA-SHA384
   v:NotBefore: Aug  2 00:00:00 2023 GMT; NotAfter: Aug  1 23:59:59 2033 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=CN = *.musicbrainz.org
issuer=C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 3
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 3867 bytes and written 397 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE
---
Certificate chain
 0 s:CN = *.musicbrainz.org
   i:C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 3
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA384
   v:NotBefore: Sep  8 00:00:00 2023 GMT; NotAfter: Oct  5 23:59:59 2024 GMT
 1 s:C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 3
   i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
   a:PKEY: rsaEncryption, 3072 (bit); sigalg: RSA-SHA384
   v:NotBefore: Aug  2 00:00:00 2023 GMT; NotAfter: Aug  1 23:59:59 2033 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIGgjCCBOqgAwIBAgIRAPiNca1USM7KdWqjUF97GNwwDQYJKoZIhvcNAQEMBQAw
VjELMAkGA1UEBhMCRlIxDjAMBgNVBAoTBUdhbmRpMTcwNQYDVQQDEy5HYW5kaSBS
U0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBDQSAzMB4XDTIzMDkw
ODAwMDAwMFoXDTI0MTAwNTIzNTk1OVowHDEaMBgGA1UEAwwRKi5tdXNpY2JyYWlu
ei5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7c0jfykmj3BU3
DoN18hAc/kINaa0sbCYV+XaBkZK+jXQOgt9k23nlWOl3ZABDdsRh6SWy39osPOEL
xUZ8zvhftD/O4cSoYus0hLeM1QtQHIxd0NYD+qDKUkmgVZqP+jC173SvmUEW0j72
pC8NdLDplDGX2nGrjpvhg6z9GN0oi2NbquuG2iJ02F90jwQsZ+P8LkuQMgLwss1M
rQCPKOLDnNqzCEsUoPJMiZ4Ee7WI7wUVTUtfGuI/iucODVbnThw8RmvHfhqmYVHw
Q3OUJ1urgpUfo7j8k3VQ5gSUPJ9GS7zC/QTmQd0Ij0/Bf791ivZ5f8Pfo7vlRrNl
sLpU6oyFAgMBAAGjggMDMIIC/zAfBgNVHSMEGDAWgBSBEZLeZjKlsFszPWVDhfzU
BC3xrjAdBgNVHQ4EFgQUEgl6VbNiXmKHbjBA7+OsxKIXrPIwDgYDVR0PAQH/BAQD
AgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MEkGA1UdIARCMEAwNAYLKwYBBAGyMQECAhowJTAjBggrBgEFBQcCARYXaHR0cHM6
Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQIBMIGDBggrBgEFBQcBAQR3MHUwTgYI
KwYBBQUHMAKGQmh0dHA6Ly9jcnQuc2VjdGlnby5jb20vR2FuZGlSU0FEb21haW5W
YWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EzLmNydDAjBggrBgEFBQcwAYYXaHR0cDov
L29jc3Auc2VjdGlnby5jb20wLQYDVR0RBCYwJIIRKi5tdXNpY2JyYWluei5vcmeC
D211c2ljYnJhaW56Lm9yZzCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHcAdv+I
Pwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGKc/v7YgAABAMASDBGAiEA
jmriwpQr4Nv5nnW0HyXBLxqadHSJDcdejcaZSGwGFusCIQCWHK2qyLVIzyAIdOzM
LNKHbIHRR0hvvHhDNneKR1/g8wB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2k
PTBI1/urAAABinP7+44AAAQDAEcwRQIhAMGgEmHW29uPNl2v+4tNcySvDLYMorxy
135queO0AA0QAiBZ4abq2jSchB4OBdU1IlpImrxpIfH79AMWiulcHgxrxAB1AO7N
0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABinP7+7UAAAQDAEYwRAIg
MeN5dcNIriOd4ExFh35ltv9pYeudjfbUyEKbkL2PfusCIAgTw0gzctf05YyxnNUM
joHdkRektOBUVcfjKS2v1G8GMA0GCSqGSIb3DQEBDAUAA4IBgQAlZkr5l40mOW27
e1fhQN2/L9APUUZ9uKl4kKGRxpkY4vitUJSsocUNRL9doFRcwj7ZuamhpeIEOiFW
wND0SYkAeRYlMxULdIQ0AxlNtrgbCsRcqz5tVOnDAnDKtoZ2TM2AKbcSLm+OVo2u
KSxW6ajJMd7C8uaSf+Km+M+iyY4st2UmgG/fakN0NtSgJ9ZGCVKo7+mpmJpyo9o+
7xfqAl4FOoisy9gj4Lho6VR09wpviyzyjnUorLutrxsuLKFLnLDim2+09GrVGkam
ssIn1rbiKnmU2Fh9iZE0+FKAWOp9afu+OIhj+ci/hgsp0OKbIUIPBnxymmz0rnYY
mn6e+Z4yXnLeFg1yOpHyEfZtj5Mq7rOIgkaew/BvjPjh566tfDLnjrKaQodcE+be
iT49i51goP7iKUQLN09xPT49lAaOAdHotYNISvTfhT9X38bCwe0N/rkQCUtOr9Cy
POQtogIVpS8RuzgjoPklA8NKNCJwilnrwn0ebg/9jRdzggGgZI8=
-----END CERTIFICATE-----
subject=CN = *.musicbrainz.org
issuer=C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 3
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 4025 bytes and written 449 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---