reorganised SSL setting checks