title: how to find self signed certificate
body: <p>I'm confused about website certificate verification.  Please see details below:</p>
  
  <p>Connection to the website(www.bitstamp.net) with python urllib2 threw:</p>
  
  <pre><code>urllib2.URLError: &lt;urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)&gt;
  </code></pre>
  
  <p>curl gave a similar error:</p>
  
  <pre><code>$ curl https://www.bitstamp.net
  curl: (60) SSL certificate problem: self signed certificate in certificate chain
  </code></pre>
  
  <p>However, openssl shows each certificate verified (assuming "1" means verified):</p>
  
  <pre><code>$ openssl s_client -showcerts -connect www.bitstamp.net:443
  CONNECTED(00000003)
  depth=3 C = SE, O = AddTrust AB, OU = AddTrust External TTP Network, CN = AddTrust External CA Root
  verify return:1
  depth=2 C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Certification Authority
  verify return:1
  depth=1 C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Domain Validation Secure Server CA
  verify return:1
  depth=0 OU = Domain Control Validated, OU = Hosted by Incapsula Inc, OU = PositiveSSL Multi-Domain, CN = incapsula.com
  verify return:1
  </code></pre>
  
  <p>What's going on here?  Is there a "self signed certificate" as claimed by curl?  If so, which one?</p>