Would be nice to be able to check for DNSSEC and TLSA record suport. See Swede for a tool that can do TLSA checking, however it dosen't do starttls: https://github.com/pieterlexis/swede/