Deeztek Support:
> Nov 21 12:52:19 smtp postfix/smtp[17859]: 9277043E30:
> to=<some...@gmail.com>,
> relay=alt4.gmail-smtp-in.l.google.com[74.125.136.26]:25, delay=5.7,
> delays=0.05/0.02/5.7/0, dsn=4.7.5, status=deferred (Server certificate
> not verified)
Certificate chain
0 s:/C=US/ST=California/L=Mountain View/O=Google Inc/CN=mx.google.com
i:/C=US/O=Google Inc/CN=Google Internet Authority G2
1 s:/C=US/O=Google Inc/CN=Google Internet Authority G2
i:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA
2 s:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA
i:/C=US/O=Equifax/OU=Equifax Secure Certificate Authority
Do you have the root certificate?
Did you tell Postfix what name to expect in the server certificate?
It does not contain the name alt4.gmail-smtp-in.l.google.com.
Wietse
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:bf:ab:8f:0a:de:70:68
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=US, O=Google Inc, CN=Google Internet Authority G2
Validity
Not Before: Jul 15 08:56:16 2014 GMT
Not After : Apr 4 15:15:55 2015 GMT
Subject: C=US, ST=California, L=Mountain View, O=Google Inc,
CN=mx.google.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (2048 bit)
Modulus (2048 bit):
00:b5:dd:65:81:9b:ec:67:b2:7a:36:53:7a:c7:44:
76:c3:ad:fb:e4:67:34:15:9b:5e:ba:49:47:8a:57:
53:a1:74:88:7c:d2:06:83:fa:14:92:f1:ef:9e:6f:
28:59:5c:ec:7f:cb:89:c0:0b:74:04:e8:f0:c4:fa:
98:f9:49:2d:40:72:8a:f1:10:07:3b:7e:b9:e6:4e:
5f:58:8d:71:8c:37:34:46:57:46:3b:44:96:5c:72:
62:64:1f:1c:d1:5a:b6:33:40:84:2c:15:a3:d7:ae:
c9:89:2e:b7:c0:95:c1:2f:d0:25:c7:02:1e:ce:9f:
36:80:fb:15:c5:c9:bb:c5:df:89:14:b6:6a:c2:b0:
16:dc:68:b1:7c:47:e7:85:5a:3b:03:5a:78:66:c2:
50:e7:13:f2:3c:58:0f:93:67:a7:69:6e:41:9a:1f:
54:22:1e:78:73:86:f6:44:4f:ee:c5:03:74:1b:d7:
ee:e4:e7:79:eb:59:2e:49:f6:09:04:28:8a:c7:7d:
23:84:04:e8:6a:b7:19:13:de:13:d3:24:71:8e:de:
ef:5f:82:62:44:dd:51:52:df:cc:86:26:92:68:3f:
31:a3:7b:ad:c7:b8:81:30:b3:bd:02:7c:0f:b6:45:
d7:81:8a:93:72:21:60:74:93:75:ae:4d:45:40:11:
a7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Subject Alternative Name:
DNS:aspmx.l.google.com, DNS:alt1.aspmx.l.google.com,
DNS:alt2.aspmx.l.google.com, DNS:alt3.aspmx.l.google.com,
DNS:alt4.aspmx.l.google.com, DNS:gmail-smtp-in.l.google.com,
DNS:alt1.gmail-smtp-in.l.google.com, DNS:alt2.gmail-smtp-in.l.google.com,
DNS:alt3.gmail-smtp-in.l.google.com, DNS:alt4.gmail-smtp-in.l.google.com,
DNS:gmr-smtp-in.l.google.com, DNS:alt1.gmr-smtp-in.l.google.com,
DNS:alt2.gmr-smtp-in.l.google.com, DNS:alt3.gmr-smtp-in.l.google.com,
DNS:alt4.gmr-smtp-in.l.google.com, DNS:mx.google.com,
DNS:aspmx2.googlemail.com, DNS:aspmx3.googlemail.com,
DNS:aspmx4.googlemail.com, DNS:aspmx5.googlemail.com
Authority Information Access:
CA Issuers - URI:http://pki.google.com/GIAG2.crt
OCSP - URI:http://clients1.google.com/ocsp
X509v3 Subject Key Identifier:
05:91:EB:C4:E3:50:DF:95:25:05:B7:E0:FE:41:FD:D3:A7:53:2B:86
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Authority Key Identifier:
keyid:4A:DD:06:16:1B:BC:F6:68:B5:76:F5:81:B6:BB:62:1A:BA:5A:81:2F
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.11129.2.5.1
X509v3 CRL Distribution Points:
URI:http://pki.google.com/GIAG2.crl
Signature Algorithm: sha1WithRSAEncryption
71:da:5f:cb:dc:8c:87:83:51:e2:3b:66:ec:c3:e4:93:5d:62:
2f:cd:66:0d:b4:f2:dc:bf:ec:3b:6a:75:36:b1:14:4e:25:2d:
54:a8:55:d2:1c:0e:3b:bf:ad:b0:e4:df:77:58:91:d3:b4:14:
14:28:91:5b:61:93:94:6a:72:e2:0b:e0:5d:d0:25:79:3e:de:
d6:42:91:22:b0:f8:a7:b3:bd:f7:18:66:a0:a6:da:35:52:06:
1c:c1:e8:3f:7f:77:76:6a:05:39:5f:8e:cd:d3:23:37:83:53:
67:0c:af:2a:27:a8:e5:1b:84:ff:33:96:ca:31:6d:f3:d6:ef:
9c:0a:49:72:99:d8:ea:c1:e8:59:e2:af:8a:80:40:e1:88:82:
53:f5:35:09:bf:fc:0c:c6:7d:c9:7f:51:91:2a:94:27:48:28:
b0:89:cc:91:32:a0:1f:4c:2f:2d:03:61:4a:46:d4:61:a4:4f:
99:ef:45:8c:5a:ef:80:3c:7f:20:59:b3:4b:51:71:da:a4:b0:
44:95:2e:03:06:cf:77:d7:0e:79:f8:be:79:70:1f:83:d3:31:
dd:a6:58:0e:53:9b:b3:c9:56:af:08:c0:46:49:7d:1e:91:9d:
23:85:94:4d:13:30:48:24:ae:7f:9d:67:a6:0c:15:69:af:8f:
22:25:fd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
