:~$ openssl s_client -connect 54.239.54.25:443 2>&1
CONNECTED(00000003)
depth=2 /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5
verify error:num=20:unable to get local issuer certificate
verify return:0
---
Certificate chain
 0 s:/C=US/ST=Washington/L=Seattle/O=Amazon.com Inc./CN=dynamodb.eu-central-1.amazonaws.com
   i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3
 1 s:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3
   i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5
 2 s:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5
   i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority
---
Server certificate
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
subject=/C=US/ST=Washington/L=Seattle/O=Amazon.com Inc./CN=dynamodb.eu-central-1.amazonaws.com
issuer=/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3
---
No client certificate CA names sent
---
SSL handshake has read 4240 bytes and written 431 bytes
---
New, TLSv1/SSLv3, Cipher is RC4-MD5
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1
    Cipher    : RC4-MD5
    Session-ID: CD9E91D14FCF7850CCF368B93DD4EAF94D0A2DA144340F93B45DEFC857450F05
    Session-ID-ctx: 
    Master-Key: 91E2C8E1CBFF09D07363E84E05974AE3948697E6C148C6132529F4D3025F7BC00F903D142A88E15FDDF0348809B487EE
    Key-Arg   : None
    Start Time: 1404751032
    Timeout   : 300 (sec)
    Verify return code: 20 (unable to get local issuer certificate)
---