fixed: Default cipherlist fails with CURL NSS backend