optionally check for sslv3 and no tlsv1