Use one endpoint and a short list of SNI names to see which handshakes produce clean TLS metadata, h2 ALPN and valid certificates.
The checker is intentionally rate-limited and does not perform CIDR scans; it is designed for manual auditing of known public targets.