openssl s_client -connect YOURHOST:636 -showcerts