I am trying to read the openssl s_client command output, specifically the topmost section about depth and verify information. Need some help understanding how to read the output and verify information.
Tried the below command with google.com.
openssl.exe s_client -connect google.com:443
The above command gives the output below. Just pasting the topmost section.
CONNECTED(000001D8)
depth=2 C = US, O = Google Trust Services LLC, CN = GTS Root R1
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=1 C = US, O = Google Trust Services LLC, CN = GTS CA 1C3
verify return:1
depth=0 CN = *.google.com
verify return:1
Need help with understanding the verify related information, how this chain is validated starting from the last part which is the domain certificate for google.com. What I understand is that verify return 1 means the certificate is validated. Can someone help with the entire section?
