Two successful HTTPS requests in the reproduced lab used the same URL, TLS name, certificate identity, and HTTP Host value. One reached TCP port 28443; the other reached 29443. The option made the difference: --resolve supplied an address for the URL's existing host-and-port pair, while --connect-to replaced ...