einsteinium:~$ openssl s_client -connect ldap-labs.eqiad.wikimedia.org:636
CONNECTED(00000003)
depth=1 C = US, ST = California, L = San Francisco, O = Wikimedia Foundation, OU = Operations, CN = WMF CA 2014-2017
verify error:num=10:certificate has expired
notAfter=Jul 19 20:05:33 2017 GMT
---
Certificate chain
 0 s:/C=US/ST=California/O=Wikimedia Foundation/OU=Operations/CN=ldap-labs.eqiad.wikimedia.org
   i:/C=US/ST=California/L=San Francisco/O=Wikimedia Foundation/OU=Operations/CN=WMF CA 2014-2017
 1 s:/C=US/ST=California/L=San Francisco/O=Wikimedia Foundation/OU=Operations/CN=WMF CA 2014-2017
   i:/C=US/ST=California/L=San Francisco/O=Wikimedia Foundation/OU=Operations/CN=WMF CA 2014-2017
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=US/ST=California/O=Wikimedia Foundation/OU=Operations/CN=ldap-labs.eqiad.wikimedia.org
issuer=/C=US/ST=California/L=San Francisco/O=Wikimedia Foundation/OU=Operations/CN=WMF CA 2014-2017
---
No client certificate CA names sent
Peer signing digest: SHA512
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 3305 bytes and written 443 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: D91A5BD0AEB5B1A2DB54A04565703F2343CEAD89ECEA2D7390D7D3AD90A6CA48
    Session-ID-ctx: 
    Master-Key: 3C7518B2297443FA7C866BC3EBF44A46E9273E9565E3CE0770AA6FC5AFCD6A1AD22ABD8BE69AA40C429DE00608C14738
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1500496293
    Timeout   : 300 (sec)
    Verify return code: 10 (certificate has expired)
---
^C