Pego el mensaje arrojado por la herramienta openssl, la cosulta la estamos haciendo desde huarpe.uncaus.edu.ar al sitio mapuche.uncaus.edu.ar, al parecer se acepta y verifica correctamente.
arai:/var/www/html/arai-usuarios# openssl s_client -showcerts -connect mapuche.uncaus.edu.ar:443
CONNECTED(00000003)
depth=1 C = AR, ST = CHACO, L = PRESIDENCIA ROQUE SAENZ PE\C3\83\C2\91A, O = UNCAUS, OU = UNCAUS, CN = mapuche.uncaus.edu.ar, emailAddress = stellagerzerl@uncaus.edu.ar
verify return:1
depth=0 C = AR, ST = CHACO, L = PRESIDENCIA ROQUE SAENZ PE\C3\83\C2\91A, O = UNCAUS, OU = UNCAUS, CN = mapuche.uncaus.edu.ar, emailAddress = stellagerzel@uncaus.edu.ar
verify return:1
---
Certificate chain
0 s:/C=AR/ST=CHACO/L=PRESIDENCIA ROQUE SAENZ PE\xC3\x83\xC2\x91A/O=UNCAUS/OU=UNCAUS/CN=mapuche.uncaus.edu.ar/emailAddress=stellagerzel@uncaus.edu.ar
i:/C=AR/ST=CHACO/L=PRESIDENCIA ROQUE SAENZ PE\xC3\x83\xC2\x91A/O=UNCAUS/OU=UNCAUS/CN=mapuche.uncaus.edu.ar/emailAddress=stellagerzerl@uncaus.edu.ar
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=/C=AR/ST=CHACO/L=PRESIDENCIA ROQUE SAENZ PE\xC3\x83\xC2\x91A/O=UNCAUS/OU=UNCAUS/CN=mapuche.uncaus.edu.ar/emailAddress=stellagerzel@uncaus.edu.ar
issuer=/C=AR/ST=CHACO/L=PRESIDENCIA ROQUE SAENZ PE\xC3\x83\xC2\x91A/O=UNCAUS/OU=UNCAUS/CN=mapuche.uncaus.edu.ar/emailAddress=stellagerzerl@uncaus.edu.ar
---
Acceptable client certificate CA names
/C=AR/ST=CHACO/L=PRESIDENCIA ROQUE SAENZ PE\xC3\x83\xC2\x91A/O=UNCAUS/OU=UNCAUS/CN=huarpe.uncaus.edu.ar/emailAddress=stellagerzel@uncaus.edu.ar
Client Certificate Types: RSA sign, DSA sign, ECDSA sign
Requested Signature Algorithms: RSA+SHA512:DSA+SHA512:ECDSA+SHA512:RSA+SHA384:DSA+SHA384:ECDSA+SHA384:RSA+SHA256:DSA+SHA256:ECDSA+SHA256:RSA+SHA224:DSA+SHA224:ECDSA+SHA224:RSA+SHA1:DSA+SHA1:ECDSA+SHA1
Shared Requested Signature Algorithms: RSA+SHA512:DSA+SHA512:ECDSA+SHA512:RSA+SHA384:DSA+SHA384:ECDSA+SHA384:RSA+SHA256:DSA+SHA256:ECDSA+SHA256:RSA+SHA224:DSA+SHA224:ECDSA+SHA224:RSA+SHA1:DSA+SHA1:ECDSA+SHA1
Peer signing digest: SHA512
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 1959 bytes and written 314 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES256-GCM-SHA384
Session-ID: B90317104196E8EF89CABC951CB7FC3BD41342ADA5F703E97A7AF0713646B24B
Session-ID-ctx:
Master-Key: AD7531DBCC0E3276C637BF6D703F3E98FF649B908F7090C65963AF95F77B703F6A3F29EFEDC9C59CE89FFAED2C4F3492
PSK identity: None
PSK identity hint: None
SRP username: None
TLS session ticket lifetime hint: 300 (seconds)
TLS session ticket:
0000 - f7 2f 02 cd 60 05 fa bc-1f 5d 10 97 dd 8e f3 8f ./..`....]......
0010 - ee 40 a8 21 15 fc 00 44-c2 ee af 2e 92 dc 4b 62 .@.!...D......Kb
0020 - 56 61 13 81 e2 18 e7 91-31 12 df c6 1c f1 00 b5 Va......1.......
0030 - b3 ad 17 6c e5 cb 3a 5b-e9 e4 50 53 d4 aa 1a 9f ...l..:[..PS....
0040 - b7 4a fa d6 f6 ea ca 37-b3 db a2 5a 82 d4 27 e1 .J.....7...Z..'.
0050 - 93 bc 0b 39 9e 02 6d b4-13 bd 98 6a 58 b4 5b c7 ...9..m....jX.[.
0060 - 6c 2a d8 d2 29 2d ae f0-50 01 98 85 82 ec 2a 29 l*..)-..P.....*)
0070 - 21 a6 cf 54 4a ca b9 9d-9d c8 60 9f d5 53 55 60 !..TJ.....`..SU`
0080 - a9 4c 15 15 b1 20 07 5f-5c dd 4c 84 c3 d9 b5 4e .L... ._\.L....N
0090 - 70 2c 22 fe 66 81 7d e5-31 d1 0d 26 4c df 01 a9 p,".f.}.1..&L...
00a0 - a8 47 60 c2 1f 0a 06 0d-30 6a 15 f6 3f 12 89 24 .G`.....0j..?..$
00b0 - 0c d3 cf 99 36 56 84 49-70 a9 f1 2c 7e fc 40 2f ....6V.Ip..,~.@/
Start Time: 1519224845
Timeout : 7200 (sec)
Verify return code: 0 (ok)
Extended master secret: no
---
closed
Saludos.