gnutls-cli output showing bad cert

file_502370.txt (text/plain), 1.77 KB, created by James Cloos on 2014-02-25 01:15:50 UTC

*** Starting TLS handshake
- Certificate type: X.509
- Got a certificate list of 3 certificates.
- Certificate[0] info:
 - subject `C=US,ST=New Mexico,L=Albuquerque,O=GENTOO Foundation\, Inc.,CN=lists.gentoo.org', issuer `O=CAcert Inc.,OU=http://www.CAcert.org,CN=CAcert Class 3 Root', RSA key 4096 bits, signed using RSA-SHA1, activated `2012-11-07 19:57:19 UTC', expires `2014-11-07 19:57:19 UTC', SHA-1 fingerprint `7a4be0a74ae02c55deeabd46125bd56a35575480'
	Public Key ID:
		04561677ede1c9d498f62e73f6ddf16878dc2e17
	Public key's random art:
		+--[ RSA 4096]----+
		|      o.+.. .. + |
		|     . o . .  B .|
		|        .    * + |
		|       .      = .|
		|        S      . |
		|              oE+|
		|             o BB|
		|            . * B|
		|             o +.|
		+-----------------+

- Certificate[1] info:
 - subject `O=CAcert Inc.,OU=http://www.CAcert.org,CN=CAcert Class 3 Root', issuer `O=Root CA,OU=http://www.cacert.org,CN=CA Cert Signing Authority,EMAIL=[e-mail]', RSA key 4096 bits, signed using RSA-MD5 (broken!), activated `2005-10-14 07:36:33 UTC', expires `2033-03-28 07:36:30 UTC', SHA-1 fingerprint `db4c4269073fe9c2a37d890a5c1b18c4184e2a2d'
- Certificate[2] info:
 - subject `O=Root CA,OU=http://www.cacert.org,CN=CA Cert Signing Authority,EMAIL=[e-mail]', issuer `O=Root CA,OU=http://www.cacert.org,CN=CA Cert Signing Authority,EMAIL=[e-mail]', RSA key 4096 bits, signed using RSA-MD5 (broken!), activated `2003-03-30 12:29:27 UTC', expires `2033-03-29 12:29:24 UTC', SHA-1 fingerprint `135cec36f49cb8e93b1ab270cd80884676ce8f33'
- Status: The certificate is NOT trusted. The certificate chain uses insecure algorithm. 
*** Verifying server certificate failed...
*** Fatal error: Error in the certificate.
*** Handshake has failed