$ nc -vz 1.1.1.1 443

A layer 4 (TCP) health check.

$ openssl s_client -showcerts -connect ${IP}:443 -servername ${HOST}

SSL check with SNI.