check_ssl: fix starttls problems