openssl s_client -connect source.eecs.berkeley.edu:443 -CAfile ca-bundle.crt