$ openssl s_client -showcerts -connect digi.ninja:443 </dev/null
CONNECTED(00000003)
depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify return:1
depth=0 CN = digi.ninja
verify return:1
---
Certificate chain
 0 s:/CN=digi.ninja
   i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
 1 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
   i:/O=Digital Signature Trust Co./CN=DST Root CA X3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=/CN=digi.ninja
issuer=/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
---
No client certificate CA names sent
Peer signing digest: SHA512
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 3706 bytes and written 431 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 4096 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: 8935CEB754458F425E024614FB8D9AA98733C8401C312696642469E25252C2AB
    Session-ID-ctx:
    Master-Key: FD3165B8CBA7A4D61E4E623EA838A6020D0DDB3C917CEA303CA482509ECC4C28E592D59CF30873BBA2555E8ABF45855B
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - 3e e8 d8 3f d2 88 4c b9-c5 6d 8e 95 2c a6 f8 cf   >..?..L..m..,...
    0010 - 16 8a 87 46 de 53 ce be-ee e5 99 17 3a 42 ec 24   ...F.S......:B.$
    0020 - 97 0e 48 ff 12 35 f0 f7-45 39 50 8b 6f 06 7e 16   ..H..5..E9P.o.~.
    0030 - 45 0f c6 48 f0 8a d4 49-40 c7 83 98 d4 d9 91 e5   E..H...I@.......
    0040 - 9a 28 e7 f7 7b 30 14 c2-33 dc d1 a7 03 6e 8b 11   .(..{0..3....n..
    0050 - d9 cf d9 c7 d9 66 ae bb-5c c1 1e 13 2e 54 5e a1   .....f..\....T^.
    0060 - 81 44 75 4c 33 8e 12 cc-5b e2 fa 26 01 94 0a 3e   .DuL3...[..&...>
    0070 - e4 1c b3 9a 20 1d 66 44-65 4a 4f 64 38 c7 3a 40   .... .fDeJOd8.:@
    0080 - 7b d1 af 66 72 5b 3f 04-5f 6e 13 79 1d d8 a7 70   {..fr[?._n.y...p
    0090 - 25 1c ab 7c 92 32 20 8e-88 6d 76 f8 4e 45 ec 17   %..|.2 ..mv.NE..
    00a0 - e7 7a 63 65 8b ea 22 7a-4b 3e ba 02 28 21 89 fd   .zce.."zK>..(!..
    00b0 - 86 b0 3b 9e 67 df 6b 36-81 4a a1 6f 29 c4 77 e1   ..;.g.k6.J.o).w.

    Start Time: 1475832762
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
---
DONE