$ curl "https://www.example.com" --verbose
  
  $ openssl s_client -connect www.example.com:443

    $ openssl s_client -connect www.example.com:443
        CONNECTED(00000005)
depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
verify return:1
depth=1 C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1
verify return:1
depth=0 C = US, ST = California, L = Los Angeles, O = Internet\C2\A0Corporation\C2\A0for\C2\A0Assigned\C2\A0Names\C2\A0and\C2\A0Numbers, CN = www.example.org
verify return:1
---
Certificate chain
 0 s:C = US, ST = California, L = Los Angeles, O = Internet\C2\A0Corporation\C2\A0for\C2\A0Assigned\C2\A0Names\C2\A0and\C2\A0Numbers, CN = www.example.org
   i:C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1
 1 s:C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=C = US, ST = California, L = Los Angeles, O = Internet\C2\A0Corporation\C2\A0for\C2\A0Assigned\C2\A0Names\C2\A0and\C2\A0Numbers, CN = www.example.org

issuer=C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 3821 bytes and written 747 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
    Protocol  : TLSv1.3
    Cipher    : TLS_AES_256_GCM_SHA384
    Session-ID: DB8CFABA31551D888C8A80E1294C15C9AD7A7F20766BFBC2BEC6B5AD0F2C8FF9
    Session-ID-ctx: 
    Resumption PSK: B862C660F21C04DAB0EA72C05D6676FE511FF0B5F5BAF2DD4E2F5E632DAF12A22F15428196012BD2FFFE7238CF8C5F73
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 7200 (seconds)
    TLS session ticket:
    0000 - 55 62 f8 d1 39 8c 54 22-99 b8 24 8a 9e 2e e4 a4   Ub..9.T"..$.....
    0010 - 4e 55 0d 05 a1 e2 36 ce-cc 68 97 d0 39 9d 15 18   NU....6..h..9...
    0020 - 8c c8 10 51 7d c1 49 c7-26 18 5a 43 88 2d 86 cd   ...Q}.I.&.ZC.-..
    0030 - 9d 11 24 c5 96 02 df 61-b2 a8 5f 52 40 67 10 87   ..$....a.._R@g..
    0040 - 35 80 6b f2 81 8b b9 af-c8 c5 f4 eb 07 0e 8c af   5.k.............
    0050 - 08 33 4a 87 ec 8e ae 4d-8d 33 dc 78 ef e6 72 97   .3J....M.3.x..r.
    0060 - 6f 8c c8 af 3e 2a c7 88-d2 f9 ec c2 67 ed b0 40   o...>*......g..@
    0070 - 90 7a 44 24 eb 68 8d d0-3e 6f dd cf f9 6d df 5d   .zD$.h..>o...m.]
    0080 - 79 b3 fd ec 7b 26 4c d2-ac 79 7a 85 d9 49 c3 be   y...{&L..yz..I..
    0090 - 98 5c 0a 6c 30 4b 4c a7-18 69 b3 a6 62 92 43 a7   .\.l0KL..i..b.C.
    00a0 - b8 ce 7d 6e eb 49 a1 b9-11 b8 b1 c2 d8 16 a6 fd   ..}n.I..........
    00b0 - e9 31 1c 71 3e 52 f0 4f-38 e1 76 1b 0d dd 74 73   .1.q>R.O8.v...ts

    Start Time: 1716880979
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
    Max Early Data: 0
---
read R BLOCK
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
    Protocol  : TLSv1.3
    Cipher    : TLS_AES_256_GCM_SHA384
    Session-ID: C8E509EE12D512F3D4365E6DA56D2F77A5A8FF9269238F840DB36C39E77F8236
    Session-ID-ctx: 
    Resumption PSK: 0B6E514ED918ECDE051858046A6EB68AA8F2D813354C1F67A57DF04879CEF2D8C2126ED716DA67F81A90AB1CE48FE401
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 7200 (seconds)
    TLS session ticket:
    0000 - 55 62 f8 d1 39 8c 54 22-99 b8 24 8a 9e 2e e4 a4   Ub..9.T"..$.....
    0010 - 23 52 5e e6 4d 57 0a c2-27 3b fc 61 bb 1e 21 d8   #R^.MW..';.a..!.
    0020 - 8b cf b8 48 cd d9 79 d8-7e 91 d0 f5 7a 9d 47 54   ...H..y.~...z.GT
    0030 - 94 96 61 31 98 a4 d0 d1-03 d0 2c 9c c5 de fe 9e   ..a1......,.....
    0040 - 02 49 09 95 78 02 01 19-79 89 81 a8 0c 29 6d 9d   .I..x...y....)m.
    0050 - e3 4b b0 fd c3 8b b4 05-99 b0 cd e8 8d 3f a6 b4   .K...........?..
    0060 - 9a d5 32 47 7b 02 0a 4b-b4 c1 00 7a d0 bc d7 86   ..2G{..K...z....
    0070 - 3e 82 46 18 db b0 b7 cc-59 20 38 62 04 e7 df 62   >.F.....Y 8b...b
    0080 - b8 b6 94 3f 25 89 cd d6-63 57 a6 7b f3 bf 73 f0   ...?%...cW.{..s.
    0090 - 71 34 7b a8 7e 29 c3 25-77 31 4e fa 3a d3 cf 99   q4{.~).%w1N.:...
    00a0 - 25 86 ef 0b 79 4d 7f 6a-96 d2 94 ac f9 45 f6 2f   %...yM.j.....E./
    00b0 - 21 cd f9 c9 0f 7e 60 be-69 d5 2c 55 01 0b 88 66   !....~`.i.,U...f

    Start Time: 1716880979
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
    Max Early Data: 0
---
read R BLOCK