curl -v --tls-max 1.2 --cacert certs/ca.crt --cert certs/service-a.crt --key certs/service-a.key https://localhost:8443/orders | jq
* Host localhost:8443 was resolved.
* IPv6: ::1
* IPv4: 127.0.0.1
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0*   Trying [::1]:8443...
* Connected to localhost (::1) port 8443
* ALPN: curl offers h2,http/1.1
* (304) (OUT), TLS handshake, Client hello (1):
} [221 bytes data]
*  CAfile: certs/ca.crt
*  CApath: none
* (304) (IN), TLS handshake, Server hello (2):
{ [81 bytes data]
* TLSv1.2 (IN), TLS handshake, Certificate (11):
{ [1118 bytes data]
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
{ [300 bytes data]
* TLSv1.2 (IN), TLS handshake, Request CERT (13):
{ [74 bytes data]
* TLSv1.2 (IN), TLS handshake, Server finished (14):
{ [4 bytes data]
* TLSv1.2 (OUT), TLS handshake, Certificate (11):
} [2423 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
} [37 bytes data]
* TLSv1.2 (OUT), TLS handshake, CERT verify (15):
} [264 bytes data]
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.2 (OUT), TLS handshake, Finished (20):
} [16 bytes data]
* TLSv1.2 (IN), TLS change cipher, Change cipher spec (1):
{ [1 bytes data]
* TLSv1.2 (IN), TLS handshake, Finished (20):
{ [16 bytes data]
* SSL connection using TLSv1.2 / ECDHE-RSA-CHACHA20-POLY1305 / [blank] / UNDEF
* ALPN: server did not agree on a protocol. Uses default.
* Server certificate:
*  subject: CN=service-b
*  start date: Oct 12 10:07:09 2026 GMT
*  expire date: Jan 10 10:07:09 2027 GMT
*  subjectAltName: host "localhost" matched cert's "localhost"
*  issuer: CN=Lab Root CA
*  SSL certificate verify ok.
* using HTTP/1.x
> GET /orders HTTP/1.1
> Host: localhost:8443
> User-Agent: curl/8.7.1
> Accept: */*
>
* Request completely sent off
< HTTP/1.1 200
< Content-Type: application/json
< Transfer-Encoding: chunked
< Date: Mon, 12 Oct 2026 10:49:20 GMT
<
{ [123 bytes data]
100   117    0   117    0     0   3074      0 --:--:-- --:--:-- --:--:--  3162
* Connection #0 to host localhost left intact
{
  "client_cn": "service-a",
  "orders": [
    {
      "id": 1,
      "item": "widget"
    },
    {
      "id": 2,
      "item": "gadget"
    }
  ],
  "served_by": "service-b (java)"
}