Hi Jay I can confirm it works with 600ccb2 and OpenSSL 1.0.2.
Jay, --tlsv1.0 works fine for me too. In fact I see the exact same behavior you described...
I tried 7.35 from Ubuntu Trusty, 7.38 from Ubuntu Vivid and 7.40 compiled from source....
I still have this issue, even with 7.40.0: ~/src/curl-7.40.0/src $ ./curl https://qasecommerce.cielo.com.br/servicos/ecommwsec.do...