Mbeddtls debug handling server sending CA/root certificate

I am using mbed-client-linux-example trying to connect to another OMA LWM2M leshan server which sends CA/root certificate as the last certificate in the server certificates list during the server certificate handshake (just the server certificate, then the CA/root certificate). The mbed client failed verifying that CA/root certificate or it does not handle it if server chose to send the optional CA/root certificate. Or perhaps I mis-interpreted the debug log as shown below? Or maybe there is a configuration in client codes to handle that case? Hope someone can help me understand my issue and get some ideas how to resolve it. Thanks in advance.

[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure(object_name 3/0)
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure - res_name 3/0/0
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource(name 3/0/0)
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::M2MReportHandler()
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource - Creating in NSDL-C result 0
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure(object_name 3/0)
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure - res_name 3/0/17
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource(name 3/0/17)
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::M2MReportHandler()
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource - Creating in NSDL-C result 0
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure(object_name 3/0)
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure - res_name 3/0/1
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource(name 3/0/1)
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::M2MReportHandler()
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource - Creating in NSDL-C result 0
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure(object_name 3/0)
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure - res_name 3/0/2
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource(name 3/0/2)
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::M2MReportHandler()
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource - Creating in NSDL-C result 0
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource(name 3/0)
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 2
[DBG ][mClt]: M2MReportHandler::M2MReportHandler()
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource - Creating in NSDL-C result 0
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 2
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource(name 3)
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 0
[DBG ][mClt]: M2MReportHandler::M2MReportHandler()
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource - Creating in NSDL-C result 0
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 0
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_object_structure()
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_object_structure - Object Instance count 1
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_object_instance_structure()
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_object_instance_structure - ResourceBase count 2
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure(object_name Test/0)
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure - res_name Test/0/D
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource(name Test/0/D)
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::M2MReportHandler()
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource - Creating in NSDL-C result 0
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure(object_name Test/0)
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure - res_name Test/0/S
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource(name Test/0/S)
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::M2MReportHandler()
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource - Creating in NSDL-C result 0
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MInterfaceImpl::state_register - create_nsdl_list_structure - success
[DBG ][mClt]: M2MInterfaceImpl::state_register - server_address coap://10.4.10.81:5784
[DBG ][mClt]: M2MInterfaceImpl::state_register - IP address 10.4.10.81 , Port 5784
[DBG ][mClt]: M2MConnectionHandlerPimpl::resolve_server_address
[DBG ][mClt]: M2MConnectionHandlerPimpl::resolve_hostname
[DBG ][mClt]: M2MConnectionHandlerPimpl::bind_socket - port: 52574
[DBG ][mClt]: M2MConnectionHandlerPimpl::resolve_hostname - connected to 10.4.10.81

[DBG ][mClt]: M2MConnectionHandlerPimpl::resolve_server_address - secure
[DBG ][mClt]: M2MConnectionSecurityPimpl::init
[DBG ][mClt]: M2MConnectionSecurityPimpl::init - ret 0
[DBG ][mClt]: M2MConnectionSecurityPimpl::connect
[DBG ][mClt]: set_timer to 0 ms

[DBG ][mClt]: mbedtls_timing_set_delay - intermediate: 0
[DBG ][mClt]: mbedtls_timing_set_delay - final: 0
[DBG ][mClt]: mbedtls_timing_set_delay - stop
[DBG ][mClt]: M2MConnectionSecurityPimpl::start_handshake
[DBG ][mClt]: => handshake

[DBG ][mClt]: client state: 0

[DBG ][mClt]: => flush output

[DBG ][mClt]: <= flush output

[DBG ][mClt]: client state: 1

[DBG ][mClt]: => flush output

[DBG ][mClt]: <= flush output

[DBG ][mClt]: => write client hello

[DBG ][mClt]: client hello, max version: [254:253]

[DBG ][mClt]: client hello, current time: 1468508759

[DBG ][mClt]: dumping ‘client hello, random bytes’ (32 bytes)

[DBG ][mClt]: 0000: 57 87 aa 57 b9 cc 3d 5f 9d 81 2d 14 c8 c4 f0 9d W…W…=_…-…

[DBG ][mClt]: 0010: 83 d6 de e2 91 25 0c f9 67 77 7c ef 6b f3 c4 a0 …%…gw|.k…

[DBG ][mClt]: client hello, session id len.: 0

[DBG ][mClt]: dumping ‘client hello, session id’ (0 bytes)

[DBG ][mClt]: no verify cookie to send

[DBG ][mClt]: client hello, add ciphersuite: c02c

[DBG ][mClt]: client hello, add ciphersuite: c030

[DBG ][mClt]: client hello, add ciphersuite: c0ad

[DBG ][mClt]: client hello, add ciphersuite: c024

[DBG ][mClt]: client hello, add ciphersuite: c028

[DBG ][mClt]: client hello, add ciphersuite: c0af

[DBG ][mClt]: client hello, add ciphersuite: c02b

[DBG ][mClt]: client hello, add ciphersuite: c02f

[DBG ][mClt]: client hello, add ciphersuite: c0ac

[DBG ][mClt]: client hello, add ciphersuite: c023

[DBG ][mClt]: client hello, add ciphersuite: c027

[DBG ][mClt]: client hello, add ciphersuite: c0ae

[DBG ][mClt]: client hello, add ciphersuite: c038

[DBG ][mClt]: client hello, add ciphersuite: c037

[DBG ][mClt]: client hello, add ciphersuite: 00a9

[DBG ][mClt]: client hello, add ciphersuite: c0a5

[DBG ][mClt]: client hello, add ciphersuite: 00af

[DBG ][mClt]: client hello, add ciphersuite: c0a9

[DBG ][mClt]: client hello, add ciphersuite: 00a8

[DBG ][mClt]: client hello, add ciphersuite: c0a4

[DBG ][mClt]: client hello, add ciphersuite: 00ae

[DBG ][mClt]: client hello, add ciphersuite: c0a8

[DBG ][mClt]: client hello, got 23 ciphersuites

[DBG ][mClt]: client hello, compress len.: 1

[DBG ][mClt]: client hello, compress alg.: 0

[DBG ][mClt]: client hello, adding signature_algorithms extension

[DBG ][mClt]: client hello, adding supported_elliptic_curves extension

[DBG ][mClt]: client hello, adding supported_point_formats extension

[DBG ][mClt]: client hello, adding encrypt_then_mac extension

[DBG ][mClt]: client hello, adding extended_master_secret extension

[DBG ][mClt]: client hello, adding session ticket extension

[DBG ][mClt]: client hello, total extension length: 50

[DBG ][mClt]: update timeout value to 1000 millisecs

[DBG ][mClt]: set_timer to 1000 ms

[DBG ][mClt]: mbedtls_timing_set_delay - intermediate: 250
[DBG ][mClt]: mbedtls_timing_set_delay - final: 1000
[DBG ][mClt]: mbedtls_timing_set_delay - start
[DBG ][mClt]: => write record

[DBG ][mClt]: output record: msgtype = 22, version = [254:255], msglen = 150

[DBG ][mClt]: => flush output

[DBG ][mClt]: message length: 163, out_left: 163

[DBG ][mClt]: ssl->f_send() returned 163 (-0xffffff5d)

[DBG ][mClt]: <= flush output

[DBG ][mClt]: <= write record

[DBG ][mClt]: <= write client hello

[DBG ][mClt]: client state: 2

[DBG ][mClt]: => flush output

[DBG ][mClt]: <= flush output

[DBG ][mClt]: => parse server hello

[DBG ][mClt]: => read record

[DBG ][mClt]: => fetch input

[DBG ][mClt]: in_left: 0, nb_want: 13

[DBG ][mClt]: mbedtls_timing_get_delay
[DBG ][mClt]: mbedtls_timing_get_delay - ret 0
[DBG ][mClt]: f_recv_timeout: 1000 ms

[DBG ][mClt]: ssl->f_recv(_timeout)() returned 60 (-0xffffffc4)

[DBG ][mClt]: <= fetch input

[DBG ][mClt]: input record: msgtype = 22, version = [3:3], msglen = 47

[DBG ][mClt]: => fetch input

[DBG ][mClt]: in_left: 60, nb_want: 60

[DBG ][mClt]: <= fetch input

[DBG ][mClt]: handshake message: msglen = 47, type = 3, hslen = 47

[DBG ][mClt]: <= read record

[DBG ][mClt]: received hello verify request

[DBG ][mClt]: <= parse server hello

[DBG ][mClt]: => parse hello verify request

[DBG ][mClt]: dumping ‘server version’ (2 bytes)

[DBG ][mClt]: 0000: fe fd …

[DBG ][mClt]: dumping ‘cookie’ (32 bytes)

[DBG ][mClt]: 0000: a8 c3 56 12 ae eb d9 3f 34 4f 9d 76 f1 e0 84 30 …V…?4O.v…0

[DBG ][mClt]: 0010: 87 9c 9f 27 3f 7b 61 7e d7 a0 c1 94 f0 d6 7c be …’?{a~…|.

[DBG ][mClt]: set_timer to 0 ms

[DBG ][mClt]: mbedtls_timing_set_delay - intermediate: 0
[DBG ][mClt]: mbedtls_timing_set_delay - final: 0
[DBG ][mClt]: mbedtls_timing_set_delay - stop
[DBG ][mClt]: <= parse hello verify request

[DBG ][mClt]: client state: 1

[DBG ][mClt]: => flush output

[DBG ][mClt]: <= flush output

[DBG ][mClt]: => write client hello

[DBG ][mClt]: client hello, max version: [254:253]

[DBG ][mClt]: dumping ‘client hello, random bytes’ (32 bytes)

[DBG ][mClt]: 0000: 57 87 aa 57 b9 cc 3d 5f 9d 81 2d 14 c8 c4 f0 9d W…W…=_…-…

[DBG ][mClt]: 0010: 83 d6 de e2 91 25 0c f9 67 77 7c ef 6b f3 c4 a0 …%…gw|.k…

[DBG ][mClt]: client hello, session id len.: 0

[DBG ][mClt]: dumping ‘client hello, session id’ (0 bytes)

[DBG ][mClt]: dumping ‘client hello, cookie’ (32 bytes)

[DBG ][mClt]: 0000: a8 c3 56 12 ae eb d9 3f 34 4f 9d 76 f1 e0 84 30 …V…?4O.v…0

[DBG ][mClt]: 0010: 87 9c 9f 27 3f 7b 61 7e d7 a0 c1 94 f0 d6 7c be …’?{a~…|.

[DBG ][mClt]: client hello, add ciphersuite: c02c

[DBG ][mClt]: client hello, add ciphersuite: c030

[DBG ][mClt]: client hello, add ciphersuite: c0ad

[DBG ][mClt]: client hello, add ciphersuite: c024

[DBG ][mClt]: client hello, add ciphersuite: c028

[DBG ][mClt]: client hello, add ciphersuite: c0af

[DBG ][mClt]: client hello, add ciphersuite: c02b

[DBG ][mClt]: client hello, add ciphersuite: c02f

[DBG ][mClt]: client hello, add ciphersuite: c0ac

[DBG ][mClt]: client hello, add ciphersuite: c023

[DBG ][mClt]: client hello, add ciphersuite: c027

[DBG ][mClt]: client hello, add ciphersuite: c0ae

[DBG ][mClt]: client hello, add ciphersuite: c038

[DBG ][mClt]: client hello, add ciphersuite: c037

[DBG ][mClt]: client hello, add ciphersuite: 00a9

[DBG ][mClt]: client hello, add ciphersuite: c0a5

[DBG ][mClt]: client hello, add ciphersuite: 00af

[DBG ][mClt]: client hello, add ciphersuite: c0a9

[DBG ][mClt]: client hello, add ciphersuite: 00a8

[DBG ][mClt]: client hello, add ciphersuite: c0a4

[DBG ][mClt]: client hello, add ciphersuite: 00ae

[DBG ][mClt]: client hello, add ciphersuite: c0a8

[DBG ][mClt]: client hello, got 23 ciphersuites

[DBG ][mClt]: client hello, compress len.: 1

[DBG ][mClt]: client hello, compress alg.: 0

[DBG ][mClt]: client hello, adding signature_algorithms extension

[DBG ][mClt]: client hello, adding supported_elliptic_curves extension

[DBG ][mClt]: client hello, adding supported_point_formats extension

[DBG ][mClt]: client hello, adding encrypt_then_mac extension

[DBG ][mClt]: client hello, adding extended_master_secret extension

[DBG ][mClt]: client hello, adding session ticket extension

[DBG ][mClt]: client hello, total extension length: 50

[DBG ][mClt]: update timeout value to 1000 millisecs

[DBG ][mClt]: set_timer to 1000 ms

[DBG ][mClt]: mbedtls_timing_set_delay - intermediate: 250
[DBG ][mClt]: mbedtls_timing_set_delay - final: 1000
[DBG ][mClt]: mbedtls_timing_set_delay - start
[DBG ][mClt]: => write record

[DBG ][mClt]: output record: msgtype = 22, version = [254:255], msglen = 182

[DBG ][mClt]: => flush output

[DBG ][mClt]: message length: 195, out_left: 195

[DBG ][mClt]: ssl->f_send() returned 195 (-0xffffff3d)

[DBG ][mClt]: <= flush output

[DBG ][mClt]: <= write record

[DBG ][mClt]: <= write client hello

[DBG ][mClt]: client state: 2

[DBG ][mClt]: => flush output

[DBG ][mClt]: <= flush output

[DBG ][mClt]: => parse server hello

[DBG ][mClt]: => read record

[DBG ][mClt]: => fetch input

[DBG ][mClt]: in_left: 0, nb_want: 13

[DBG ][mClt]: mbedtls_timing_get_delay
[DBG ][mClt]: mbedtls_timing_get_delay - ret 0
[DBG ][mClt]: f_recv_timeout: 1000 ms

[DBG ][mClt]: ssl->f_recv(_timeout)() returned 1493 (-0xfffffa2b)

[DBG ][mClt]: <= fetch input

[DBG ][mClt]: input record: msgtype = 22, version = [3:3], msglen = 100

[DBG ][mClt]: => fetch input

[DBG ][mClt]: in_left: 1493, nb_want: 113

[DBG ][mClt]: <= fetch input

[DBG ][mClt]: handshake message: msglen = 100, type = 2, hslen = 100

[DBG ][mClt]: <= read record

[DBG ][mClt]: dumping ‘server hello, version’ (2 bytes)

[DBG ][mClt]: 0000: fe fd …

[DBG ][mClt]: server hello, current time: 1468508759

[DBG ][mClt]: dumping ‘server hello, random bytes’ (32 bytes)

[DBG ][mClt]: 0000: 57 87 aa 57 a9 05 88 45 13 a0 84 52 4b 2c c2 ac W…W…E…RK,…

[DBG ][mClt]: 0010: 7c 72 0f 4d 5a a3 7f e3 b6 bc eb c8 bd 12 6c 9b |r.MZ…l.

[DBG ][mClt]: server hello, session id len.: 32

[DBG ][mClt]: dumping ‘server hello, session id’ (32 bytes)

[DBG ][mClt]: 0000: 57 87 aa 57 ee 0c aa 17 26 49 f2 6c b8 44 19 94 W…W…&I.l.D…

[DBG ][mClt]: 0010: 60 6b 2b 69 0f 36 1f 8c 58 d7 1f 4f ba d6 ba 71 `k+i.6…X…O…q

[DBG ][mClt]: no session has been resumed

[DBG ][mClt]: server hello, chosen ciphersuite: c023

[DBG ][mClt]: server hello, compress alg.: 0

[DBG ][mClt]: server hello, chosen ciphersuite: TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256

[DBG ][mClt]: server hello, total extension length: 16

[DBG ][mClt]: unknown extension found: 20 (ignoring)

[DBG ][mClt]: unknown extension found: 19 (ignoring)

[DBG ][mClt]: found supported_point_formats extension

[DBG ][mClt]: <= parse server hello

[DBG ][mClt]: client state: 3

[DBG ][mClt]: => flush output

[DBG ][mClt]: <= flush output

[DBG ][mClt]: => parse certificate

[DBG ][mClt]: => read record

[DBG ][mClt]: => fetch input

[DBG ][mClt]: next record in same datagram, offset: 113

[DBG ][mClt]: in_left: 1380, nb_want: 13

[DBG ][mClt]: <= fetch input

[DBG ][mClt]: input record: msgtype = 22, version = [3:3], msglen = 1006

[DBG ][mClt]: => fetch input

[DBG ][mClt]: in_left: 1380, nb_want: 1019

[DBG ][mClt]: <= fetch input

[DBG ][mClt]: handshake message: msglen = 1006, type = 11, hslen = 1006

[DBG ][mClt]: <= read record

[DBG ][mClt]: peer certificate #1:

[DBG ][mClt]: cert. version : 1

[DBG ][mClt]: serial number : B2:DE:4B:32:DF:1A:63:4C

[DBG ][mClt]: issuer name : C=CH, ST=Some-State, L=Zurich, O=ETH Zurich Examples, CN=Cf root

[DBG ][mClt]: subject name : C=US, ST=CA, L=Alameda, O=S&C Electric, OU=Enterprise Software, CN=dm_a

[DBG ][mClt]: issued on : 2016-05-26 01:51:27

[DBG ][mClt]: expires on : 2017-05-26 01:51:27

[DBG ][mClt]: signed using : ECDSA with SHA256

[DBG ][mClt]: EC key size : 256 bits

[DBG ][mClt]: value of ‘crt->eckey.Q(X)’ (256 bits) is:

[DBG ][mClt]: de af 5e 8f 1b 8d 26 df 35 11 74 70 c5 1d 2c 29

[DBG ][mClt]: d3 0e 9e 73 9d 29 42 9f 6b 4d be 76 eb d4 5a 2a

[DBG ][mClt]: value of ‘crt->eckey.Q(Y)’ (255 bits) is:

[DBG ][mClt]: 59 f1 69 23 82 18 9f 26 59 0c 7d 77 24 c0 ad f2

[DBG ][mClt]: a9 69 d4 b7 5a 8c cd ea c1 98 f7 a6 b3 01 6c 53

[DBG ][mClt]: peer certificate #2:

[DBG ][mClt]: cert. version : 3

[DBG ][mClt]: serial number : D7:63:D7:76:DD:97:3A:CA

[DBG ][mClt]: issuer name : C=CH, ST=Some-State, L=Zurich, O=ETH Zurich Examples, CN=Cf root

[DBG ][mClt]: subject name : C=CH, ST=Some-State, L=Zurich, O=ETH Zurich Examples, CN=Cf root

[DBG ][mClt]: issued on : 2014-11-15 14:33:38

[DBG ][mClt]: expires on : 2015-11-15 14:33:38

[DBG ][mClt]: signed using : ECDSA with SHA256

[DBG ][mClt]: EC key size : 256 bits

[DBG ][mClt]: basic constraints : CA=true

[DBG ][mClt]: value of ‘crt->eckey.Q(X)’ (255 bits) is:

[DBG ][mClt]: 45 7f 24 e3 7b 14 98 e5 0a 60 d3 1a 9a 9b 63 ce

[DBG ][mClt]: e2 28 d6 21 b6 c7 40 51 07 2f 39 9d d7 61 88 9b

[DBG ][mClt]: value of ‘crt->eckey.Q(Y)’ (255 bits) is:

[DBG ][mClt]: 41 e5 2a 8d 48 5c 86 99 60 0a f7 fb 59 fa e3 e2

[DBG ][mClt]: d5 f2 63 ab 69 b9 d2 96 7f 8d 91 5a 85 4e de a0

[DBG ][mClt]: x509_verify_cert() returned -9984 (-0x2700)

[DBG ][mClt]: <= parse certificate

[DBG ][mClt]: <= handshake

Nevermind - debug this a little and found a bad expired root certificate…