drop SSL2 backwards compatibility

SSL 2.0 CLIENT-HELLO support was previously deprecated in TLS 1.2 and SSL 2.0 negotiation was prohibited entirely in RFC 6176.