TLS Version Check

One handshake per protocol version, so the answer is what the server really accepts rather than what it says it prefers. TLS 1.0 and 1.1 are deprecated by RFC 8996 and fail a PCI audit; 1.2 is the floor, 1.3 is what you want.

Host: Port 443 is assumed. Scheme and path are ignored.

Test handshakes