openssl req -new -key example.com.2048.encrypted.20141118.key -out STAR.example.com.2048.20141119.csr
openssl genrsa -des3 -out example.com.2048.encrypted.20141118.key 2048
openssl s_client -showcerts -connect 77.87.229.83:443 | grep -E 'subject=|issuer='
openssl s_client -showcerts -connect gmail.google.com:443 -servername gmail.com
openssl s_client -showcerts -connect www.bsi.de:443