-bash-4.1$ openssl s_client -showcerts -tls1 -connect 169.165.106.110:8443
CONNECTED(00000003)
depth=3 DC = net, DC = Citi, CN = Citi Internal Root CA
verify error:num=19:self signed certificate in certificate chain
verify return:0
140159775143752:error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate:s3_pkt.c:1259:SSL alert number 42
140159775143752:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:s3_pkt.c:598:
---
Certificate chain
 0 s:/C=SG/ST=SG/L=Singapore/O=Citigroup Inc./OU=164176/CN=APACHKASTU4V04.apac.nsroot.net
   i:/DC=net/DC=nsroot/CN=Citi Internal Device CA 01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:/DC=net/DC=nsroot/CN=Citi Internal Device CA 01
   i:/DC=net/DC=Citi/CN=Citi Internal Policy CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 2 s:/DC=net/DC=Citi/CN=Citi Internal Policy CA
   i:/DC=net/DC=Citi/CN=Citi Internal Root CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 3 s:/DC=net/DC=Citi/CN=Citi Internal Root CA
   i:/DC=net/DC=Citi/CN=Citi Internal Root CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=/C=SG/ST=SG/L=Singapore/O=Citigroup Inc./OU=164176/CN=APACHKASTU4V04.apac.nsroot.net
issuer=/DC=net/DC=nsroot/CN=Citi Internal Device CA 01
---
Acceptable client certificate CA names
/DC=net/DC=Citi/CN=Citi Internal Root CA
/DC=net/DC=Citi/CN=Citi Internal Policy CA
/C=US/ST=MA/L=HOPKINTON/O=EMC/OU=CTD/CN=univmaxrestforwardingclient
/C=SG/ST=SG/L=Singapore/O=Citigroup Inc./OU=164176/CN=APACHKASTU4V04.apac.nsroot.net
/DC=net/DC=nsroot/CN=Citi Internal Device CA 01
---
SSL handshake has read 6619 bytes and written 338 bytes
---
New, TLSv1/SSLv3, Cipher is AES128-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1
    Cipher    : AES128-SHA
    Session-ID: 56270A20FB213F32B316F3187509916D71542C264BE79C1D53D78AF2979E52B4
    Session-ID-ctx: 
    Master-Key: 9559A72CE1E8AB6E7B553BF9825A2C477548F7CCFB5B8B410A1F341081E47C1511180A16B78746937470A969EB944462
    Key-Arg   : None
    Krb5 Principal: None
    PSK identity: None
    PSK identity hint: None
    Start Time: 1445399072
    Timeout   : 7200 (sec)
    Verify return code: 19 (self signed certificate in certificate chain)