oops, reinstate TLSv1 string