OCSP implementation on TLS. Where possible, TLS1.1+ will use ECDHE-AES128 CBC ciphers. Most of the time the old geezer browsers will force RC4.