# Force TLS 1.2 in this PS session (.NET 4.x default still applies to PS 5.1 with no SchUseStrongCrypto)
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

# Time the actual request
Measure-Command {
  try {
    $r = Invoke-WebRequest -UseBasicParsing -TimeoutSec 30 `
      https://keycloak.tracemate-hz-nbg1.de/realms/blueworld/.well-known/openid-configuration
    Write-Host "OK: $($r.StatusCode), $($r.Content.Length) bytes"
  } catch {
    Write-Host "FAIL: $($_.Exception.Message)"
  }
}

# Also confirm registry actually took: must be 1 on both
Get-ItemProperty 'HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319' SchUseStrongCrypto,SystemDefaultTlsVersions
Get-ItemProperty 'HKLM:\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v4.0.30319' SchUseStrongCrypto,SystemDefaultTlsVersions