whatsapp: TLS handshake with e<ID>.whatsapp.net:443

[bassosimone]

It definitely seems to work, so we should be doing that:

% openssl s_client -connect e1.whatsapp.net:443
CONNECTED(00000006)
depth=0 C = US, ST = California, L = Menlo Park, O = Internet.org, CN = *.internet.org
verify error:num=18:self signed certificate
verify return:1
depth=0 C = US, ST = California, L = Menlo Park, O = Internet.org, CN = *.internet.org
verify error:num=10:certificate has expired
notAfter=Feb 27 19:43:41 2019 GMT
verify return:1
depth=0 C = US, ST = California, L = Menlo Park, O = Internet.org, CN = *.internet.org
notAfter=Feb 27 19:43:41 2019 GMT
verify return:1
---
Certificate chain
 0 s:/C=US/ST=California/L=Menlo Park/O=Internet.org/CN=*.internet.org
   i:/C=US/ST=California/L=Menlo Park/O=Internet.org/CN=*.internet.org
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIDSjCCAjICCQDny3LLQe7X5TANBgkqhkiG9w0BAQsFADBnMQswCQYDVQQGEwJV
UzETMBEGA1UECAwKQ2FsaWZvcm5pYTETMBEGA1UEBwwKTWVubG8gUGFyazEVMBMG
A1UECgwMSW50ZXJuZXQub3JnMRcwFQYDVQQDDA4qLmludGVybmV0Lm9yZzAeFw0x
ODAyMjcxOTQzNDFaFw0xOTAyMjcxOTQzNDFaMGcxCzAJBgNVBAYTAlVTMRMwEQYD
VQQIDApDYWxpZm9ybmlhMRMwEQYDVQQHDApNZW5sbyBQYXJrMRUwEwYDVQQKDAxJ
bnRlcm5ldC5vcmcxFzAVBgNVBAMMDiouaW50ZXJuZXQub3JnMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6os2U1se0tBzSsTXdgw9k1wPvPPggnXp1b82
d1qAwtJ7Y/PJmXuVs6lWZ9mfmIzRu8FZPHD3jg8u9wL05iJBmoVHryOnDofiirHC
gYstPwsqApYG8Sse6oKNcBsImL6spdBEN/g4rTo7R5TsLw2R4Fcg7ta1ghwsGiEa
RKoi2YsjtqCW+TpApJwAMyvqq/fSEWB0+b27s9Ec4CNwiDc5cmEy5oEHXN7YyfOw
UOgriEa7Xsl2uT8JVDVFYuHi7mBivVV7l50Icf8NVTd9zDOGwJBuIBbUc2uqt+Gl
YvZBBZbTcop1oMIMoMtGAdnUnrPnoAWirAowBRe8itQE5jCFWQIDAQABMA0GCSqG
SIb3DQEBCwUAA4IBAQCLcCWXQiK38byKDuLVSHd4a8v+mdEAY2m/PduwzJdoLZr+
X0XgfZutbwCv7K25X1ElO8JP/fX6KJFi+EcM62ZsLG5Ss4IfdKqZgPyhijXQt9Yg
eVeJpjdL9VA1ZeNZcXg+WwZnyI+HE5yZ1nDsWj8tNyECG+f+bOZW2M38O9WaTm69
Vb4T8c3AQJ5CFyXiQNqJCzFNPboE8hy+dX7x0CqRuD2pkugQKQqBdPoogxeVfIda
7w2RgUCQN0pDLMIuHtECOXnQnQ0S5u1rZ74F9L6ARsSBGZIPT2E8oy3aVXFn64B7
XfEGhdsmymyT9uEoMnwXa+tydPdvv2Wh0S3DjFNU
-----END CERTIFICATE-----
subject=/C=US/ST=California/L=Menlo Park/O=Internet.org/CN=*.internet.org
issuer=/C=US/ST=California/L=Menlo Park/O=Internet.org/CN=*.internet.org
---
No client certificate CA names sent
Server Temp Key: ECDH, X25519, 253 bits
---
SSL handshake has read 1459 bytes and written 281 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-CHACHA20-POLY1305
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-CHACHA20-POLY1305
    Session-ID: C45A72E8E5BF447EBCB6C23B7E46C3D6FDFF441A4FE9F54FE73D34B6BDD7309B
    Session-ID-ctx: 
    Master-Key: DEEB4F72B9459FC0AE5C1DCF11CA667319F4744F4C9666B4389DC47D4F6F034805C042F328EFD992BD43793A726EAD23
    TLS session ticket lifetime hint: 7200 (seconds)
    TLS session ticket:
    0000 - a0 b7 1a 76 fe 24 e7 eb-12 4b 5a 9c 77 b0 41 fb   ...v.$...KZ.w.A.
    0010 - 92 1a f6 cf 4b df 19 65-f2 ac fa 9d 97 bc 16 2d   ....K..e.......-
    0020 - b0 bf 2d 63 b0 05 a7 57-18 f2 11 aa 65 a9 c6 e3   ..-c...W....e...
    0030 - 61 37 b2 ce eb 6e d4 0f-8a 93 70 81 b7 22 13 c5   a7...n....p.."..
    0040 - 35 76 9a c4 76 f1 15 05-fc 9f 98 71 e5 fc b2 f4   5v..v......q....
    0050 - 93 6e 36 d3 bf 3b 54 ce-c1 cd d6 b7 ec 70 69 3a   .n6..;T......pi:
    0060 - 3e 4d a9 e2 34 5e 1a fc-04 9d ff 3b 50 a8 e7 30   >M..4^.....;P..0
    0070 - f4 f0 b1 87 bc 84 23 9e-cb 64 2a 3e a7 a4 19 d4   ......#..d*>....
    0080 - 6a 0c cc 18 93 4b 49 db-7f 0a 1f 77 58 e3 50 24   j....KI....wX.P$
    0090 - 00 1d 5c ce 9e 28 6a 5d-63 16 71 15 6a 9e aa 66   ..\..(j]c.q.j..f

    Start Time: 1658862640
    Timeout   : 7200 (sec)
    Verify return code: 10 (certificate has expired)
---