100% across the board on ssllabs plus compatibility fallback (2/2)