Initiate TLS handshake directly from the server, read certificate, negotiate protocol and remaining validity.
