Proxy TLS Handshake Failure: Separate Certificate, SNI, Protocol, and Route Problems
Diagnose a proxy TLS handshake failure by separating certificate validation, SNI routing, TLS version, client configuration, and exit-route health before retrying or replacing the proxy.

