atmark@tade9:~$ openssl s_client -connect marketplace.visualstudio.com:443 -showcerts CONNECTED(00000003) depth=2 C = US, ST = CA, L = Santa Clara, O = Netskope Inc., OU = certadmin, CN = certadmin, emailAddress = certadmin@netskope.com verify error:num=19:self signed certificate in certificate chain verify return:1 depth=2 C = US, ST = CA, L = Santa Clara, O = Netskope Inc., OU = certadmin, CN = certadmin, emailAddress = certadmin@netskope.com verify return:1 depth=1 C = JP, ST = KANAGAWA, L = Kawasaki, O = "Computer Engineering & Consulting, Ltd.", OU = f4a23500f4ca1bd68e24b8b0bbd6608d, CN = ca.cec-ltd.goskope.com, emailAddress = certadmin@netskope.com verify return:1 depth=0 CN = *.visualstudio.com verify return:1 --- Certificate chain 0 s:CN = *.visualstudio.com i:C = JP, ST = KANAGAWA, L = Kawasaki, O = "Computer Engineering & Consulting, Ltd.", OU = f4a23500f4ca1bd68e24b8b0bbd6608d, CN = ca.cec-ltd.goskope.com, emailAddress = certadmin@netskope.com -----BEGIN CERTIFICATE----- MIIEDzCCAvegAwIBAgIRAOiQo/JPNkc3no5ma7r+NQIwDQYJKoZIhvcNAQELBQAw gdgxCzAJBgNVBAYTAkpQMREwDwYDVQQIEwhLQU5BR0FXQTERMA8GA1UEBxMIS2F3 YXNha2kxMDAuBgNVBAoMJ0NvbXB1dGVyIEVuZ2luZWVyaW5nICYgQ29uc3VsdGlu ZywgTHRkLjEpMCcGA1UECxMgZjRhMjM1MDBmNGNhMWJkNjhlMjRiOGIwYmJkNjYw OGQxHzAdBgNVBAMTFmNhLmNlYy1sdGQuZ29za29wZS5jb20xJTAjBgkqhkiG9w0B CQEWFmNlcnRhZG1pbkBuZXRza29wZS5jb20wHhcNMjUwMTA3MDEyMjUyWhcNMjYw MjA2MDEyMjUyWjAdMRswGQYDVQQDDBIqLnZpc3VhbHN0dWRpby5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG9SIHjLq+Hr94loc3099YDa4lzspW YyA+9uVFkDMOilcHRMA2fM5AhfSKQiRvDiaq//j77BY5HL8yI3de4zPLKC+1haZe MVZnBI5NlDJrYaOCfc97G7fW9p8N/Z9UTKwOZSXzMatjjxibIwvCr1Cpb3r87lXz 6Mq/Gzdb26uL6TYqfacpWkGbp3PjswllcCTBwfiE9OC4JLUy3Z7GqS4stZGAoben asVwAmllX4EUCCbS9S21lYcT1WREgODeugqBoXeUoCxCLoY2xPdo7tsGxfQLxqCF L+fUibWq3OQYDEF7r6DNNiTrHy07wTn4Q7y0R33J30TRM3wtRI8PEyfpAgMBAAGj gY0wgYowCQYDVR0TBAIwADAdBgNVHQ4EFgQU3Ml7c2FFSTKIqmcKOJ8RovqPCY8w LwYDVR0RBCgwJoISKi52aXN1YWxzdHVkaW8uY29tghB2aXN1YWxzdHVkaW8uY29t MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DQYJKoZIhvcNAQELBQADggEBAF2FS1hy6U4/H19lbrtkdapn0SvX/tEuPMJfPRhL trMb9ir9/QIHSIwLq82VIiT9mpTMyPP9mVunkFuLa8NbTXo6zVMsRwFYmnGx2UsX qkr4naQstbi144nQ4RD/UbszBfb4+mg5DkhC58tm7zThPeB39iqSalCRotkAQ5XN 6QgjFMPXsbEcAhHDz/a4b8f7tva6AO4SmFcSe1qiruM0vtp+qHsrLN9cnZYE9q2z RPM5Gse9cc+92eOv7ISgklY8w11oxHXs0e/zvdeAr0eIri/iOY1tvOGz9PzD3Ede 60SGZss5mf1r210/SP6qAOmA6BjkG+RWPUqlfs/PKazcNO8= -----END CERTIFICATE----- 1 s:C = JP, ST = KANAGAWA, L = Kawasaki, O = "Computer Engineering & Consulting, Ltd.", OU = f4a23500f4ca1bd68e24b8b0bbd6608d, CN = ca.cec-ltd.goskope.com, emailAddress = certadmin@netskope.com i:C = US, ST = CA, L = Santa Clara, O = Netskope Inc., OU = certadmin, CN = certadmin, emailAddress = certadmin@netskope.com -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgIDGXPuMA0GCSqGSIb3DQEBCwUAMIGXMQswCQYDVQQGEwJV UzELMAkGA1UECBMCQ0ExFDASBgNVBAcTC1NhbnRhIENsYXJhMRYwFAYDVQQKEw1O ZXRza29wZSBJbmMuMRIwEAYDVQQLEwljZXJ0YWRtaW4xEjAQBgNVBAMTCWNlcnRh ZG1pbjElMCMGCSqGSIb3DQEJARYWY2VydGFkbWluQG5ldHNrb3BlLmNvbTAeFw0y MDA3MzAxNDAwMDlaFw0zMDA3MjgxNDAwMDlaMIHYMQswCQYDVQQGEwJKUDERMA8G A1UECBMIS0FOQUdBV0ExETAPBgNVBAcTCEthd2FzYWtpMTAwLgYDVQQKDCdDb21w dXRlciBFbmdpbmVlcmluZyAmIENvbnN1bHRpbmcsIEx0ZC4xKTAnBgNVBAsTIGY0 YTIzNTAwZjRjYTFiZDY4ZTI0YjhiMGJiZDY2MDhkMR8wHQYDVQQDExZjYS5jZWMt bHRkLmdvc2tvcGUuY29tMSUwIwYJKoZIhvcNAQkBFhZjZXJ0YWRtaW5AbmV0c2tv cGUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsmMHLLXE79u abXDAOw02nC21UwZ6CXJxjwcasYSMm07aEZit6VStA5i9FZWbWHn7mpesukz8WjY /x2xLMBQvLJKuXdI+1eEwhDVdOR7qF4JifwepscXjui8SrluLaWpKKHHPUzKksNI 2TPvotV2wSBUK9cNaopCZcd44uxW5zuHrv3a2M/XhKqGKbOlbG/O3XrL1I/PkOGq vTHaKAbUwx5xD0YUPL1YFBGXO9pv/u1fjcOeFS2Uub2Z+eBtsqmHeUvdKUvwFtD2 goA7B7AuIeogVL17W7alAUU77HmhKhZWljbXaj52cNd/gqzKbtmulxikZbHtnPwM f9LdEidaFQIDAQABo4H4MIH1MAwGA1UdEwQFMAMBAf8wHQYDVR0OBBYEFHowCOP+ atgZNdFfjfl5XPHX2329MIHFBgNVHSMEgb0wgbqAFK8ik2swhXoty6OjlIIZbDcA aXtUoYGdpIGaMIGXMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExFDASBgNVBAcT C1NhbnRhIENsYXJhMRYwFAYDVQQKEw1OZXRza29wZSBJbmMuMRIwEAYDVQQLEwlj ZXJ0YWRtaW4xEjAQBgNVBAMTCWNlcnRhZG1pbjElMCMGCSqGSIb3DQEJARYWY2Vy dGFkbWluQG5ldHNrb3BlLmNvbYICATgwDQYJKoZIhvcNAQELBQADggEBAFHNjkUu oRoJ4k1NlWfmmOjA/aMIkq0CBY9/3h4tXb+fxbivGMCThhBw6s8K3fB/R0IDaVq5 guKIBl1PhkBGUmslcWGVuk2LQh++66L7LhAJ08CSzaHu4HXZNnZa7lPcdUi1J4OI ar4jhrMLZjJsZ33FFVfrDs7f6p58jrYMi028JBhmznIyhID9ICbykEuYlGOkiwu+ ZHU2nQULp4v5lMar7d3A6SYPC7VaBAWgaTsbhWclCwjr1cUFP/hswvD1U3imau8X keN5aut3i1BV2A8g04rq7fzLddz2B5oX8hZX/Vli1zRxrvKXblcpV+NNgddwQPAl GiJ6poYibIyHVWo= -----END CERTIFICATE----- 2 s:C = US, ST = CA, L = Santa Clara, O = Netskope Inc., OU = certadmin, CN = certadmin, emailAddress = certadmin@netskope.com i:C = US, ST = CA, L = Santa Clara, O = Netskope Inc., OU = certadmin, CN = certadmin, emailAddress = certadmin@netskope.com -----BEGIN CERTIFICATE----- MIID/DCCAuSgAwIBAgICATgwDQYJKoZIhvcNAQELBQAwgZcxCzAJBgNVBAYTAlVT MQswCQYDVQQIEwJDQTEUMBIGA1UEBxMLU2FudGEgQ2xhcmExFjAUBgNVBAoTDU5l dHNrb3BlIEluYy4xEjAQBgNVBAsTCWNlcnRhZG1pbjESMBAGA1UEAxMJY2VydGFk bWluMSUwIwYJKoZIhvcNAQkBFhZjZXJ0YWRtaW5AbmV0c2tvcGUuY29tMB4XDTE5 MTAyNTE4MTg1MFoXDTI5MTAyMjE4MTg1MFowgZcxCzAJBgNVBAYTAlVTMQswCQYD VQQIEwJDQTEUMBIGA1UEBxMLU2FudGEgQ2xhcmExFjAUBgNVBAoTDU5ldHNrb3Bl IEluYy4xEjAQBgNVBAsTCWNlcnRhZG1pbjESMBAGA1UEAxMJY2VydGFkbWluMSUw IwYJKoZIhvcNAQkBFhZjZXJ0YWRtaW5AbmV0c2tvcGUuY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYamgJifcWI3j9zv6OHI0hCQnZHj8uuzZ6sw nfbediwij9X7MTbQZmswXZt4EgJ58uPN8Opt3+eh+XGP1wbQemUIm9ZkL5WzMVxP 3xW/twL5hBBQOXvn6JX5HS8N53fiDDU8LCuc0xj0Kpdl3TiDDpebtJe6UPiwebyz jtOwD3ddpiIlArvRzUU1Hi9RIey2clf//3NChyvteQ3TIhciwxbViOxPHxXTRI7w znFlwuDxvx7X5wwDkI2vzV2jpn23uIROjpCYC7kLvGInEKrgVAzoKauaC+tJmiJY 91m2KGN6xGc94JMRawH6Q+wv/7cBsOGVOUVIpxcM1XS5UqngTwIDAQABo1AwTjAM BgNVHRMEBTADAQH/MB0GA1UdDgQWBBSvIpNrMIV6Lcujo5SCGWw3AGl7VDAfBgNV HSMEGDAWgBSvIpNrMIV6Lcujo5SCGWw3AGl7VDANBgkqhkiG9w0BAQsFAAOCAQEA pKVWEFpG7/d0kAhre2eYLwYEf6tVVP2to9Cp8RgBFSG/ScmEqt2/TXXcpMjRI5eG nOUbPJIQJi2TQEiI/BG/g6CJZWJiE3fR3NTCksbLbcbdl7exkKT/tItebf4qXlca ASSd0hBTygE7QqOPSENnSrj7r9P0gv0Z2Bf5jKdirhr/clz/ev88O3KYuxqwwl31 vyLDT0hd/Dzka2/ZKMXL5uFAtsYqpU4hz5NeGgNntKAkwcfFgsTh/NZaYjyRhvUp jRBt2Mt8OwtxJ+vPM4mvpwFMzvfzhdJfKX/p6IWOJjDFHHFRqdFaHvW3zzarzFt6 tLom62fi7946+fyBmEPu5w== -----END CERTIFICATE----- --- Server certificate subject=CN = *.visualstudio.com issuer=C = JP, ST = KANAGAWA, L = Kawasaki, O = "Computer Engineering & Consulting, Ltd.", OU = f4a23500f4ca1bd68e24b8b0bbd6608d, CN = ca.cec-ltd.goskope.com, emailAddress = certadmin@netskope.com --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA-PSS Server Temp Key: X25519, 253 bits --- SSL handshake has read 3892 bytes and written 400 bytes Verification error: self signed certificate in certificate chain --- New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 2048 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 19 (self signed certificate in certificate chain) --- --- Post-Handshake New Session Ticket arrived: SSL-Session: Protocol : TLSv1.3 Cipher : TLS_AES_256_GCM_SHA384 Session-ID: CC921387ED2BAA58F8B0CD4F173E7F7347572D078EC2F2F1F834B2DF990E2C68 Session-ID-ctx: Resumption PSK: 0C44A7E963D8DB7B05915128908F6443773BDE559DEED9CC790F10EF1E662B20519759D5BCDC382A7B694EBB094C72C4 PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 7200 (seconds) TLS session ticket: 0000 - 85 02 aa cf 3e ef 73 e3-6b fa 5b 8b ad 2b 97 1f ....>.s.k.[..+.. 0010 - b2 ce 79 ce 57 a4 eb b9-c5 41 c9 19 32 c7 7a 31 ..y.W....A..2.z1 0020 - 16 28 ec a5 27 10 26 d5-62 d6 91 61 82 e6 e0 a3 .(..'.&.b..a.... 0030 - 29 e0 d4 b1 4c f7 9b 25-a8 29 4d 4f cc e0 6a c8 )...L..%.)MO..j. 0040 - 36 14 04 60 4a 1b 1f 6b-81 08 ef 28 cf 46 fe eb 6..`J..k...(.F.. 0050 - 63 df 2c dd e9 a1 e3 66-7b e6 8e ef 08 d1 4f 05 c.,....f{.....O. 0060 - fd 24 5c 39 79 a6 c1 a6-1e ae 79 f9 97 8c 33 53 .$\9y.....y...3S 0070 - 75 8e 30 26 cb 94 50 20-96 25 83 ca 59 5c 45 8c u.0&..P .%..Y\E. 0080 - 31 a2 7b bc f3 ab 88 1b-70 b1 a0 88 96 f0 a7 3e 1.{.....p......> 0090 - c6 bc 88 e5 4c d6 c1 3c-a9 2d 16 21 04 59 8d 18 ....L..<.-.!.Y.. 00a0 - 71 86 09 a3 ee 62 73 b3-86 b2 7c 8e ab d4 30 ae q....bs...|...0. 00b0 - 83 3f ab 03 8e 93 9e a2-03 b9 68 20 0a e2 5b 7f .?........h ..[. 00c0 - 0d 2d f5 11 e6 45 28 36-03 c6 53 be 40 ef 13 58 .-...E(6..S.@..X Start Time: 1739148359 Timeout : 7200 (sec) Verify return code: 19 (self signed certificate in certificate chain) Extended master secret: no Max Early Data: 0 --- read R BLOCK --- Post-Handshake New Session Ticket arrived: SSL-Session: Protocol : TLSv1.3 Cipher : TLS_AES_256_GCM_SHA384 Session-ID: 388A520B468FB605763B4504F8856B28634283E69008DF2EF09D33BEC2C8078B Session-ID-ctx: Resumption PSK: FB9EB27CFA2434D87996D551D158D45616BB43A50FCC2A5B1DCC7833CCF09F63FFDF001BC4D0072BA2EE392CBDA08212 PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 7200 (seconds) TLS session ticket: 0000 - 85 02 aa cf 3e ef 73 e3-6b fa 5b 8b ad 2b 97 1f ....>.s.k.[..+.. 0010 - 34 38 41 57 63 44 ab 12-85 6f 36 ca b6 67 4b bd 48AWcD...o6..gK. 0020 - be 1d 30 0c c1 d4 cf ad-58 2b 5a d9 15 0f 5b 65 ..0.....X+Z...[e 0030 - eb 5b d8 92 d2 82 2e 38-e4 0f 1c 1f 28 b2 a8 d4 .[.....8....(... 0040 - ca a1 0e 1c 29 48 d9 28-fb 5b a7 5f 08 22 4c 49 ....)H.(.[._."LI 0050 - 53 b0 48 84 b3 41 2e 45-12 56 3e 4a 36 79 67 57 S.H..A.E.V>J6ygW 0060 - b8 79 d9 61 a2 f9 71 b7-15 cd b5 c8 9b 29 3d ae .y.a..q......)=. 0070 - f6 1f 41 7e b6 95 af 57-42 bf 58 2e b5 73 2b 71 ..A~...WB.X..s+q 0080 - a0 67 5b 08 93 34 76 3c-5a 31 da be 9d 97 a2 0a .g[..4v