SIP DNS & TLS diagnostics

Walk DNS the way an RFC 3263 SIP UA does (NAPTR → SRV → A/AAAA), compare Sipflow's server walk against Cloudflare and Google DoH in your browser, and inspect the leaf certificate for anysips:target.