But if you take a closer look at many of them, they actually do TLSv1.1 with weak primitives, have weak CA certs or other problems in their system.