AIA Certificate Test

http://10.196.89.74/country/country_philippines.php
https://www.accuweather.com/en/al/tirana/6522/current-weather/6522?lang=en-us

https://tv.sohu.com/20180705/n600562967.shtml

http://www.nbcnews.com/id/21134540/vp/45025092

openssl s_client -connect css.tv.itc.cn:443 -showcerts -servername css.tv.itc.cn

CONNECTED(00000003)
depth=0 C = CN, ST = beijing, L = beijing, O = Beijing Sohu New Media Information Technology Co. Ltd, OU = Tech, CN = tv.sohu.com
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 C = CN, ST = beijing, L = beijing, O = Beijing Sohu New Media Information Technology Co. Ltd, OU = Tech, CN = tv.sohu.com
verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
 0 s:/C=CN/ST=beijing/L=beijing/O=Beijing Sohu New Media Information Technology Co. Ltd/OU=Tech/CN=tv.sohu.com
   i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=GeoTrust RSA CA 2018
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=/C=CN/ST=beijing/L=beijing/O=Beijing Sohu New Media Information Technology Co. Ltd/OU=Tech/CN=tv.sohu.com
issuer=/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=GeoTrust RSA CA 2018
---
No client certificate CA names sent
Peer signing digest: SHA256
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 3868 bytes and written 455 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: 03FCEE6AB2874C326BED01113BFD7442195EEA0D0641B23E0EBD492A9244F549
    Session-ID-ctx:
    Master-Key: 74B9C13FFF8873CDA0B4824C2640AB834D781CA14628E9F3D72CEC3FBFC14FFDFCA26D6FC32F2B7B2C6F3282B27E28AA
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - 46 db ef 17 7b 5c dd d7-b2 cd b3 69 0f b1 03 de   F...{\.....i....
    0010 - 05 85 0a a1 82 7c e0 89-47 bc c2 ec df 56 80 32   .....|..G....V.2
    0020 - cd 0d a0 77 13 1f 3a fb-41 70 24 ce 73 dd e9 8a   ...w..:.Ap$.s...
    0030 - c2 bf a5 65 16 7e af a1-14 0d 70 18 32 1a 88 cf   ...e.~....p.2...
    0040 - 95 99 2e ed f4 a2 48 f0-43 78 3d 04 41 df 2e d6   ......H.Cx=.A...
    0050 - e2 61 11 18 e4 6a 01 57-d4 8a ae 43 63 06 84 07   .a...j.W...Cc...
    0060 - 53 f1 1b ba e3 36 e7 d9-44 b0 f7 9c fd db 70 d3   S....6..D.....p.
    0070 - df 07 a2 6b e7 b3 e1 e8-93 77 16 27 5c fd a3 a0   ...k.....w.'\...
    0080 - 0f 0f 4e 52 91 fe f3 12-e4 e5 d8 a7 b3 13 de 5f   ..NR..........._
    0090 - b5 78 43 98 63 78 2d b2-24 b9 31 2e b1 f9 be cf   .xC.cx-.$.1.....
    00a0 - 0a 73 8c d9 dd c3 1f 70-24 51 6f 45 4e b6 54 01   .s.....p$QoEN.T.
    00b0 - 7a 61 51 4d 7b fb e9 51-a6 e7 32 c5 e3 03 d4 9f   zaQM{..Q..2.....

    Start Time: 1531100548
    Timeout   : 300 (sec)
    Verify return code: 21 (unable to verify the first certificate)
---