$ curl -v https://wm-bot.wmflabs.org/browser/index.php
*   Trying 208.80.155.156...
* TCP_NODELAY set
* Connected to wm-bot.wmflabs.org (208.80.155.156) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Client hello (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-CHACHA20-POLY1305
* ALPN, server accepted to use h2
* Server certificate:
*  subject: C=US; ST=California; L=San Francisco; O=Wikimedia Foundation, Inc.; CN=*.wmflabs.org
*  start date: Aug 30 19:21:01 2017 GMT
*  expire date: Nov 16 15:41:05 2018 GMT
*  subjectAltName: host "wm-bot.wmflabs.org" matched cert's "*.wmflabs.org"
*  issuer: C=BE; O=GlobalSign nv-sa; CN=GlobalSign Organization Validation CA - SHA256 - G2
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* Using Stream ID: 1 (easy handle 0x5612113b88e0)
> GET /browser/index.php HTTP/2
> Host: wm-bot.wmflabs.org
> User-Agent: curl/7.58.0
> Accept: */*
> 
* Connection state changed (MAX_CONCURRENT_STREAMS updated)!
< HTTP/2 200 
< server: nginx/1.13.6
< date: Thu, 01 Nov 2018 16:41:02 GMT
< content-type: text/html; charset=UTF-8
< content-length: 19
< x-clacks-overhead: GNU Terry Pratchett
< 
* Connection #0 to host wm-bot.wmflabs.org left intact
Could not connect: