[X509::whole [SSL::cert 0]] shows incomplete certficate

you could split the base-64 output from [X509::whole [SSL::cert 0]] by newline , then log each individual line instead of the entire cert at once:

foreach line [split [X509::whole [SSL::cert 0]] "\n"] {
      log local0. "$line"
}

not pretty, nor efficient but it achieves the end-goal of having the entire certificate dumped into the logs...