allow connecting to TLS1.2 servers without EMS