I built a tool for this purpose, inspired by a comment on lobste.rs[0].

You can check a port like this, saves a few round trips on a good day.

    $ dstp google.com --port 80

    Ping: 27.44ms
    DNS: resolving 216.58.212.14
    SystemDNS: resolving 2a00:1450:4017:804::200e, 142.250.187.174
    TLS: certificate is valid for 64 more days
    HTTPS: got 200 OK

[0]: https://github.com/ycd/dstp#motivation