echo | openssl s_client -connect example.com:443 -servername example.com -brief

-brief collapses s_client's verbose output into a few lines covering protocol version, cipher, and certificate subject and issuer. The fastest way to check which TLS version and cipher a server negotiates. Add -tls1_3 to test support for that protocol specifically.