TLS SNI Test Site: alice.sni.velox.chFirst of all, here's the root certificate to be used for testing - import this into your client (at least temporarily) to get rid of warnings about an unknown certificate issuer. Unfortunately, your client [Hatena::Crawler/0.01] did not send a TLS server name indication extension (RFC 4366) in its ClientHello (negotiated protocol: TLSv1), so you're probably getting warnings about certificate name
