Get negotiated SSL / TLS encryption protocol from Conn

I need data about the encryption methods used ex:

TLSv1.3/TLS_AES_128_GCM_SHA256

Where might I retrieve it from a conn?

negotiated_protocol(socket)
@spec negotiated_protocol(t()) :: ThousandIsland.Transport.on_negotiated_protocol()
Returns information about the protocol negotiated during transport handshaking (if any).

but what does it return?

I need the same for %Bandit.HTTP2.Stream{}