james@dev:~$ openssl s_client -starttls smtp -connect mail.bluebaron.ca:587
CONNECTED(00000003)
depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify return:1
depth=0 CN = mail.bluebaron.ca
verify return:1
---
Certificate chain
 0 s:/CN=mail.bluebaron.ca
   i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
 1 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
   i:/O=Digital Signature Trust Co./CN=DST Root CA X3
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgISA4tEb+LGJeQOKa0aP2O24cOxMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzAzMTEyMTU1MDBaFw0x
NzA2MDkyMTU1MDBaMBwxGjAYBgNVBAMTEW1haWwuYmx1ZWJhcm9uLmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBivjkvmeTubYiAcXnFATcq4MS5v
cM+tNV7QZSGtmmOlgHs3xZdXvOeKfNIHzAGeBHk3GQLCmlA2hNI6XzC+0P5CN7ra
MjmHf4Wx+gBep4YBowJUlzBXahhqT+ZOmlNRmuTy0ztg1GEhwidjxI1EbhH0zrBd
r5bZ3nUpgpOBAPZ94eI8m7i/qJTcaORUfIxOnLew3i7HN2HNG9TjKMZKf576a4My
XXULv4/eAU65dkTjGMihPaWPVRF3KUnDpO0VNORh+5A2jLGNkq6Xw/2BLtCvVfKh
aH2NWVN0zELy19G6RUPL59KIaoufXigLRcvtDem/PgPRbMgaA05jX8VGYQIDAQAB
o4ICEjCCAg4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQsEXCk3dlbN2gYsevhiRke
fwQ2UzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBwBggrBgEFBQcB
AQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw
dC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzAcBgNVHREEFTATghFtYWlsLmJsdWViYXJvbi5jYTCB/gYDVR0gBIH2
MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMg
Q2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQ
YXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNh
dGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9z
aXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQAm7tSRUHpY2n8Ubo4wRFRCwSgrK5LA
7CTVdP40RVhmwHGDoKAH2R82Qe08NySoGJwB9GD6cV9sDKU+8up3Q7Tl7WgmKsTZ
ArU58VIOaOHwpWuqaH7W2OJC0GfxRq7qu2JbrUDlLoj4sNiHgwwfbn5F0gZwefy1
PH+LB+ff2B6VVX+/N8Hnp4jtFT3ZwIG5fc8X5ZLT1sP7XGDt7sn4JPQAERS82/hF
UHU2DGLsnC7kY1c8oV9aveS8jz2zFs1cknPxtbK7HdIXeRFeM0KzhVZKQkXWGql0
nytVKC4oV7m6PFxfxb+a/iq3EuUUK5Ga9hoJ++QeLm55UYT4gOJR+B0x
-----END CERTIFICATE-----
subject=/CN=mail.bluebaron.ca
issuer=/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
---
No client certificate CA names sent
Peer signing digest: SHA512
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 3342 bytes and written 466 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: E79146CA6C7476322317F6882D27EEECB6EB6BE3A92615F912FB6E4C6376E9B9
    Session-ID-ctx:
    Master-Key: 946540A92718176E79184F17DAE2C6A7FF8310E9A91C3CC778901CE9986B975FD66342ECF02F88FB8A044CD59F3BAE9A
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 7200 (seconds)
    TLS session ticket:
    0000 - 0b b7 f3 15 56 d3 20 32-c0 e4 b2 04 3b 2d 23 59   ....V. 2....;-#Y
    0010 - 66 26 9b e5 87 20 7b 8f-52 dc 40 5a 42 f2 b8 9f   f&... {.R.@ZB...
    0020 - b5 0b 82 56 6a c2 2f b7-9b 82 6c 6a 05 69 27 3c   ...Vj./...lj.i'<
    0030 - 1b e1 7d 80 c7 f5 be cb-51 cb 14 f9 db 96 48 27   ..}.....Q.....H'
    0040 - aa f0 55 b7 89 6b ea f1-1d e2 2f 25 51 e0 fa 92   ..U..k..../%Q...
    0050 - 71 06 28 66 7d 88 00 7f-ac 40 28 d4 e3 98 81 84   q.(f}....@(.....
    0060 - 8a 0c dd c4 58 1a 7b 57-ab 4f 19 b7 f7 97 7a 4d   ....X.{W.O....zM
    0070 - 38 63 53 a5 32 99 86 f0-2e 8d ee 32 7c 1a 00 ed   8cS.2......2|...
    0080 - d5 1c 70 93 01 da 7c ee-7d e0 b3 3d 98 07 80 38   ..p...|.}..=...8
    0090 - 44 81 c9 9c 5b 9a 0c e7-27 09 4e 2c a5 7b 81 d5   D...[...'.N,.{..

    Start Time: 1489280369
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
---
250 DSN
read:errno=0