#!/usr/bin/env bash
# Pass 3: where exactly does 443 stall? TLS/TCP level probing
echo "=== PASS3 TLS DIAG $(date -u '+%H:%M:%S UTC') ==="
for D in tslaw.id dmark.id surabaya-skincentre.com; do
  IP=$(getent ahostsv4 "$D" | awk 'NR==1{print $1}')
  echo "--- ${D} resolves to ${IP:-NONE}"
  echo -n "  tcp443: "
  timeout 6 bash -c "exec 3<>/dev/tcp/${IP}/443" 2>/dev/null && echo "CONNECT OK" || echo "CONNECT FAIL/TIMEOUT"
  echo "  tls: $(echo | timeout 8 openssl s_client -connect ${IP}:443 -servername ${D} 2>&1 | grep -E '^(subject|Verify|New|SSL_connect|errno)' | head -3 | tr '\n' ' ')"
done
echo "=== DONE $(date -u '+%H:%M:%S UTC') ==="