testing ssl headers