You can see this by trying to connect to a TLS server using a self-signed certificate (e.g. https://self-signed.badssl.com/).

I would expect to see calls to SSL_CTX_set_default_verify_paths() and SSL_get_verify_result() in the code.