Report the actual TLS version used, not the version the cipher belongs
to.
Add :modulus to get the RSA modules of a x509 cert.