Force SSLv23 when fetching server certificates
Delurk certificate blacklisting

Python makes TLS fallback directly on the ssl module incredibly painful,
and having moved to much shorter issuance certificates, this offers much
less utility.