Update TLS config to the "intermediate" recommendation from Mozilla

https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29