Inspect the TLS certificate a host presents: issuer, names it covers, expiry and protocol.
Connects to a TLS port, reads the certificate it presents and tells you who issued it, which names it covers and how long it stays valid. An expired or mismatched certificate is a common reason a TLS tunnel suddenly stops working.