is the server enforcing minimum ssl requirements?