bugfix: use SNI if possible for cipher checks (+cipher command)