check if certificate used by server is trused
run always at least n-jobs at a time, use www prefix as fallback

run scans for many hosts at a time, but don't run more than
specified amount

in case where default domain name doesn't resolve or doesn't support
TLS, retry with www. prefix
add ability to ignore results from untrusted servers
better parallelism of jobs

start many at a time, but wait for completion of past tasks
only after a lot have been started
in "no-untrusted more": don't trust ADH and AECDH suites

If server negotiates ADH or AECDH suite, openssl returns "ok" in
cert checking. Don't mark server as trusted because of that.

Don't collect statistics on servers that provide only untrusted
connections.