---

dmitriev-aal@VDI-Dmitriev-A:~$ openssl s_client \
>   -connect 10.21.58.75:443 \
>   -servername tst-merchantsbp.rshb.ru \
>   -showcerts </dev/null
CONNECTED(00000003)
depth=0 CN = ips-haproxy-sandbox.rshb.ru
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 CN = ips-haproxy-sandbox.rshb.ru
verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
 0 s:CN = ips-haproxy-sandbox.rshb.ru
   i:DC = local, DC = NETLAB, CN = NETLAB-CA01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = ips-haproxy-sandbox.rshb.ru

issuer=DC = local, DC = NETLAB, CN = NETLAB-CA01

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 1607 bytes and written 395 bytes
Verification error: unable to verify the first certificate
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 21 (unable to verify the first certificate)
---
DONE
dmitriev-aal@VDI-Dmitriev-A:~$