What it is
Opens a real TLS connection to the host and reports what was actually negotiated: the protocol version, the cipher suite chosen, ALPN, and whether the certificate chain validates.
Why it matters
Configuration files say what should happen. This says what does. It is the quickest way to confirm a server has genuinely stopped accepting an old protocol, or that a change you made has taken effect.