$ gnutls-cli --ocsp www.cloudflarechallenge.comProcessed 153 CA certificate(s).
Resolving 'www.cloudflarechallenge.com'...
Connecting to '107.170.194.215:443'...
- Certificate type: X.509
- Got a certificate list of 5 certificates.
- Certificate[0] info:
 - subject `OU=Domain Control Validated,OU=Free SSL,CN=cloudflarechallenge.com', issuer `C=GB,ST=Greater Manchester,L=Salford,O=COMODO CA Limited,CN=EssentialSSL CA', RSA key 2048 bits, signed using RSA-SHA1, activated `2014-04-10 00:00:00 UTC', expires `2014-07-09 23:59:59 UTC', SHA-1 fingerprint `b1ea109f8cc4e2c61ae820b0977c49caf31fd6dd'
	Public Key Id:
		398a1b7c45b31cdd7dd3c63eda9e48f533a844cb
	Public key's random art:
		+--[ RSA 2048]----+
		|                 |
		|         . . . ..|
		|        + . . ..=|
		|       o =     +.|
		|        S  .   o.|
		|   . . o .o . = o|
		|    + o    E + +.|
		|     +    . o o +|
		|    .      . . o |
		+-----------------+

- Certificate[1] info:
 - subject `C=GB,ST=Greater Manchester,L=Salford,O=COMODO CA Limited,CN=EssentialSSL CA', issuer `C=GB,ST=Greater Manchester,L=Salford,O=COMODO CA Limited,CN=COMODO Certification Authority', RSA key 2048 bits, signed using RSA-SHA1, activated `2006-12-01 00:00:00 UTC', expires `2019-12-31 23:59:59 UTC', SHA-1 fingerprint `73820a20f8f47a457cd0b54cc4e4e31cefa5c1e7'
- Certificate[2] info:
 - subject `C=GB,ST=Greater Manchester,L=Salford,O=COMODO CA Limited,CN=COMODO Certification Authority', issuer `C=US,ST=UT,L=Salt Lake City,O=The USERTRUST Network,OU=http://www.usertrust.com,CN=UTN - DATACorp SGC', RSA key 2048 bits, signed using RSA-SHA1, activated `2006-12-01 00:00:00 UTC', expires `2020-05-30 10:48:38 UTC', SHA-1 fingerprint `4e154acb683efd5578001432b92afe896812b85e'
- Certificate[3] info:
 - subject `C=US,ST=UT,L=Salt Lake City,O=The USERTRUST Network,OU=http://www.usertrust.com,CN=UTN - DATACorp SGC', issuer `C=SE,O=AddTrust AB,OU=AddTrust External TTP Network,CN=AddTrust External CA Root', RSA key 2048 bits, signed using RSA-SHA1, activated `2005-06-07 08:09:10 UTC', expires `2020-05-30 10:48:38 UTC', SHA-1 fingerprint `9e99817d12280c9677674430492eda1dce2e4c63'
- Certificate[4] info:
 - subject `C=SE,O=AddTrust AB,OU=AddTrust External TTP Network,CN=AddTrust External CA Root', issuer `C=SE,O=AddTrust AB,OU=AddTrust External TTP Network,CN=AddTrust External CA Root', RSA key 2048 bits, signed using RSA-SHA1, activated `2000-05-30 10:48:38 UTC', expires `2020-05-30 10:48:38 UTC', SHA-1 fingerprint `02faf3e291435468607857694df5e45b68851868'
- Status: The certificate is trusted. 
Cannot find URL from issuer: The specified algorithm or protocol is unknown.
Cannot contact OCSP server
*** OCSP response ignored
- Description: (TLS1.2-PKIX)-(ECDHE-RSA-SECP256R1)-(AES-128-GCM)-(AEAD)
- Session ID: CF:92:29:01:43:87:3B:0F:F6:20:7C:A7:F2:19:8F:FA:F4:ED:8D:CD:84:9D:5F:7D:41:E9:94:95:EC:66:A9:A9
- Ephemeral EC Diffie-Hellman parameters
 - Using curve: SECP256R1
 - Curve size: 256 bits
- Version: TLS1.2
- Key Exchange: ECDHE-RSA
- Server Signature: RSA-SHA1
- Cipher: AES-128-GCM
- MAC: AEAD
- Compression: NULL
- Handshake was completed

- Simple Client Mode:
