remotely
proxytunnel -p $squid:8080 -d nethence.com:443 -a 7000 echo Q | openssl s_client -connect localhost:7000 -servername nethence.com | openssl x509 -noout -text | less
on the squid machine
ls -lhF /var/spool/squid/ssl_db/certs/
https://github.com/proxytunnel/proxytunnel
https://wiki.archlinux.org/title/HTTP_tunneling
https://bugs.squid-cache.org/show_bug.cgi?id=4327 –> recommends proxytunnel