The nscurl command accepts the --ats-diagnostics flag that asks it to check how a particular server responds to combinations of ATS exceptions.