How can I check https hello packet?

Hello. My scheema is: I have some agents which check ip, url and domain from special black list. They conencted to microtic, where I up vpn connection to vm machine (sandbox). IPs I filtering with iptables, domain and urls throught nginx where I check host and uri. BUT it is only for http.
I have to check somehow https traffic in my sandbox, get host and uri from hello package and reset it if needed.
What tools I can use for this ? Some examples ? Some help is very required! Thanks!