just in case.. .this appears to be working now.
-chris

On Thu, Jan 31, 2019 at 2:30 PM Mark Andrews <marka@isc.org> wrote:
[beetle:~/git/bind9] marka% fetch -v https://www.google.com/jsapi
looking up www.google.com
connecting to www.google.com:443
SSL connection established using ECDHE-RSA-AES128-GCM-SHA256
Certificate subject: /C=US/ST=California/L=Mountain View/O=Google LLC/CN=www.google.com
Certificate issuer: /C=US/O=Google Trust Services/CN=Google Internet Authority G3
requesting https://www.google.com/jsapi
fetch: https://www.google.com/jsapi: Bad Gateway
[beetle:~/git/bind9] marka% curl -v https://www.google.com/jsapi
*   Trying 2607:f8b0:4007:80e::2004...
* TCP_NODELAY set
*   Trying 172.217.14.100...
* TCP_NODELAY set
* Connected to www.google.com (2607:f8b0:4007:80e::2004) port 443 (#0)
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: /opt/local/share/curl/curl-ca-bundle.crt
  CApath: none
* TLSv1.2 (OUT), TLS header, Certificate Status (22):
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-ECDSA-AES128-GCM-SHA256
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: C=US; ST=California; L=Mountain View; O=Google LLC; CN=www.google.com
*  start date: Jan 15 13:15:00 2019 GMT
*  expire date: Apr  9 13:15:00 2019 GMT
*  subjectAltName: host "www.google.com" matched cert's "www.google.com"
*  issuer: C=US; O=Google Trust Services; CN=Google Internet Authority G3
*  SSL certificate verify ok.
> GET /jsapi HTTP/1.1
> Host: www.google.com
> User-Agent: curl/7.63.0
> Accept: */*
>
< HTTP/1.1 502 Bad Gateway
< Content-Length: 0
< Date: Thu, 31 Jan 2019 22:20:34 GMT
< Content-Type: text/html; charset=UTF-8
< Alt-Svc: quic=":443"; ma=2592000; v="44,43,39"
<
* Connection #0 to host www.google.com left intact
[beetle:~/git/bind9] marka% curl -4 -v https://www.google.com/jsapi
*   Trying 172.217.14.100...
* TCP_NODELAY set
* Connected to www.google.com (172.217.14.100) port 443 (#0)
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: /opt/local/share/curl/curl-ca-bundle.crt
  CApath: none
* TLSv1.2 (OUT), TLS header, Certificate Status (22):
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-ECDSA-AES128-GCM-SHA256
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: C=US; ST=California; L=Mountain View; O=Google LLC; CN=www.google.com
*  start date: Jan 15 13:15:00 2019 GMT
*  expire date: Apr  9 13:15:00 2019 GMT
*  subjectAltName: host "www.google.com" matched cert's "www.google.com"
*  issuer: C=US; O=Google Trust Services; CN=Google Internet Authority G3
*  SSL certificate verify ok.
> GET /jsapi HTTP/1.1
> Host: www.google.com
> User-Agent: curl/7.63.0
> Accept: */*
>
< HTTP/1.1 502 Bad Gateway
< Content-Length: 0
< Date: Thu, 31 Jan 2019 22:24:43 GMT
< Content-Type: text/html; charset=UTF-8
< Alt-Svc: quic=":443"; ma=2592000; v="44,43,39"
<
* Connection #0 to host www.google.com left intact
[beetle:~/git/bind9] marka% traceroute 172.217.14.100
traceroute to 172.217.14.100 (172.217.14.100), 64 hops max, 52 byte packets
 1  172.30.42.65 (172.30.42.65)  1.340 ms  3.278 ms  1.673 ms
 2  * * *
 3  * * *
 4  59.154.18.232 (59.154.18.232)  13.710 ms
    hu0-5-0-0.22btpr01.optus.net.au (59.154.18.234)  24.311 ms  13.662 ms
 5  72.14.219.128 (72.14.219.128)  12.445 ms  43.781 ms  10.760 ms
 6  108.170.247.74 (108.170.247.74)  12.743 ms  12.797 ms
    108.170.247.59 (108.170.247.59)  14.167 ms
 7  216.239.50.172 (216.239.50.172)  159.864 ms  162.324 ms  157.546 ms
 8  108.170.230.130 (108.170.230.130)  147.234 ms  151.094 ms  152.088 ms
 9  108.170.247.129 (108.170.247.129)  152.073 ms  149.194 ms  149.055 ms
10  108.170.230.137 (108.170.230.137)  149.697 ms  150.042 ms
    74.125.252.75 (74.125.252.75)  149.363 ms
11  lax31s01-in-f4.1e100.net (172.217.14.100)  158.438 ms  147.982 ms  149.593 ms
[beetle:~/git/bind9] marka%

--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka@isc.org