$ openssl s_client -connect radiko.jp:443 -showcerts
CONNECTED(00000003)
depth=1 /C=BE/OU=Domain Validation CA/O=GlobalSign nv-sa/CN=GlobalSign Domain Validation CA
verify error:num=20:unable to get local issuer certificate
verify return:0
---
Certificate chain
 0 s:/C=JP/OU=Domain Control Validated/O=www.radiko.jp/CN=www.radiko.jp
   i:/C=BE/OU=Domain Validation CA/O=GlobalSign nv-sa/CN=GlobalSign Domain Validation CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:/C=BE/OU=Domain Validation CA/O=GlobalSign nv-sa/CN=GlobalSign Domain Validation CA
   i:/C=BE/O=GlobalSign nv-sa/OU=Root CA/CN=GlobalSign Root CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=/C=JP/OU=Domain Control Validated/O=www.radiko.jp/CN=www.radiko.jp
issuer=/C=BE/OU=Domain Validation CA/O=GlobalSign nv-sa/CN=GlobalSign Domain Validation CA
---
No client certificate CA names sent
---
SSL handshake has read 2838 bytes and written 316 bytes
---
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
Server public key is 1024 bit
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1
    Cipher    : DHE-RSA-AES256-SHA
    Session-ID: 1C1B8FB7A8A5A6F246AC0C84A71E4333DFC832BD2066B88AE572AB3A714B0B88
    Session-ID-ctx:
    Master-Key: 9A87C337395B7604447D45C13BC20B038DB6F9C05A85B82E841BF9A79B69C2CCF53EAB6C5A1D1DBAEDB2D38409A2F944
    Key-Arg   : None
    Start Time: 1270721556
    Timeout   : 300 (sec)
    Verify return code: 20 (unable to get local issuer certificate)
---


$ openssl s_client -connect radiko.jp:443
CONNECTED(00000003)
depth=0 /serialNumber=536l6GysDECZYeGkAbH4PDpVsmzEkNzf/C=JP/O=radiko.jp/OU=GT40822686/OU=See www.rapidssl.com/resources/cps (c)10/OU=Domain Control Validated - RapidSSL(R)/CN=radiko.jp
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 /serialNumber=536l6GysDECZYeGkAbH4PDpVsmzEkNzf/C=JP/O=radiko.jp/OU=GT40822686/OU=See www.rapidssl.com/resources/cps (c)10/OU=Domain Control Validated - RapidSSL(R)/CN=radiko.jp
verify error:num=27:certificate not trusted
verify return:1
depth=0 /serialNumber=536l6GysDECZYeGkAbH4PDpVsmzEkNzf/C=JP/O=radiko.jp/OU=GT40822686/OU=See www.rapidssl.com/resources/cps (c)10/OU=Domain Control Validated - RapidSSL(R)/CN=radiko.jp
verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
 0 s:/serialNumber=536l6GysDECZYeGkAbH4PDpVsmzEkNzf/C=JP/O=radiko.jp/OU=GT40822686/OU=See www.rapidssl.com/resources/cps (c)10/OU=Domain Control Validated - RapidSSL(R)/CN=radiko.jp
   i:/C=US/O=Equifax/OU=Equifax Secure Certificate Authority
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/serialNumber=536l6GysDECZYeGkAbH4PDpVsmzEkNzf/C=JP/O=radiko.jp/OU=GT40822686/OU=See www.rapidssl.com/resources/cps (c)10/OU=Domain Control Validated - RapidSSL(R)/CN=radiko.jp
issuer=/C=US/O=Equifax/OU=Equifax Secure Certificate Authority
---
No client certificate CA names sent
---
SSL handshake has read 1415 bytes and written 316 bytes
---
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
Server public key is 1024 bit
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1
    Cipher    : DHE-RSA-AES256-SHA
    Session-ID: B320F605C58BCC1F16F3D46F143FED6CFB6430CB267B69E5941474C3B281CF27
    Session-ID-ctx:
    Master-Key: ECCE769C65C44298481426A8005BBC7AEAB7C7421232EEFEA83EC642A99B04F3E462E906C542E3F705256A358957E9C2
    Key-Arg   : None
    Start Time: 1270721669
    Timeout   : 300 (sec)
    Verify return code: 21 (unable to verify the first certificate)
---