sometimes servers starttls on an already-tls connection?
2.4.3