openssl verify -verbose -x509_strict -CAfile ca.pem -CApath nosuchdir cert_chain.pem
openssl s_client -connect www.google.com:443