*** Starting TLS handshake - Certificate type: X.509 - Got a certificate list of 3 certificates. - Certificate[0] info: - subject `C=US,ST=New Mexico,L=Albuquerque,O=GENTOO Foundation\, Inc.,CN=lists.gentoo.org', issuer `O=CAcert Inc.,OU=http://www.CAcert.org,CN=CAcert Class 3 Root', RSA key 4096 bits, signed using RSA-SHA1, activated `2012-11-07 19:57:19 UTC', expires `2014-11-07 19:57:19 UTC', SHA-1 fingerprint `7a4be0a74ae02c55deeabd46125bd56a35575480' Public Key ID: 04561677ede1c9d498f62e73f6ddf16878dc2e17 Public key's random art: +--[ RSA 4096]----+ | o.+.. .. + | | . o . . B .| | . * + | | . = .| | S . | | oE+| | o BB| | . * B| | o +.| +-----------------+ - Certificate[1] info: - subject `O=CAcert Inc.,OU=http://www.CAcert.org,CN=CAcert Class 3 Root', issuer `O=Root CA,OU=http://www.cacert.org,CN=CA Cert Signing Authority,EMAIL=support@cacert.org', RSA key 4096 bits, signed using RSA-MD5 (broken!), activated `2005-10-14 07:36:33 UTC', expires `2033-03-28 07:36:30 UTC', SHA-1 fingerprint `db4c4269073fe9c2a37d890a5c1b18c4184e2a2d' - Certificate[2] info: - subject `O=Root CA,OU=http://www.cacert.org,CN=CA Cert Signing Authority,EMAIL=support@cacert.org', issuer `O=Root CA,OU=http://www.cacert.org,CN=CA Cert Signing Authority,EMAIL=support@cacert.org', RSA key 4096 bits, signed using RSA-MD5 (broken!), activated `2003-03-30 12:29:27 UTC', expires `2033-03-29 12:29:24 UTC', SHA-1 fingerprint `135cec36f49cb8e93b1ab270cd80884676ce8f33' - Status: The certificate is NOT trusted. The certificate chain uses insecure algorithm. *** Verifying server certificate failed... *** Fatal error: Error in the certificate. *** Handshake has failed