TLS grader

Negotiate a real TLS handshake against the target on :443 and report protocol, cipher, certificate chain, and modern-baseline grade.