100% across the board on ssllabs plus compatibility fallback (1/2)