You need to add a query_response step "- starttls: true" between sending the STARTTLS command and getting back the OK (which at that point will be encrypted).
See: https://github.com/prometheus/blackbox_exporter/blob/master/CONFIGURATION.md#tcp_probe -- You received this message because you are subscribed to the Google Groups "Prometheus Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/3d3202ac-e038-4221-a994-3b4b0b91c709o%40googlegroups.com.

