ss lists TCP sockets, with -l for listeners, -n skipping name lookups, -t for TCP, and -p showing the owning process. The grep filters to port 443, so you can see who holds the HTTPS port, often the answer when a second server fails to bind. Root is needed to show process names for other users' sockets.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.