This should in theory allow for later versions of TLS too but let's
verify that when the time comes.