Determine outbound https requests underlying TLS version

Summary

Is there a way to trace an outbound https request to verify TLS version with Red Hat / Unix. Something similar to Fiddler or Wireshark for Windows.

Background

I have a Java Application performing an outbound request to a third-party API that is failing with an SSL handshake error. I am unable to amend the call to Java so unable to use -djavax flags. Is there something I can trace with outside of the Java App? At OS level perhaps?

Everything on the server and application is configured to use TLS 1.2 but the third-party API is still rejecting the request.

My theory is that our outbound requests are still leaving the server under TLS 1.1 or we’re going out on TLS 1.2 but with an unsupported cipher.

Thanks