* test for https://revoked.grc.com (should give a critical status)
* Use nmap --script ssl-enum-ciphers  instead of SSL Labs? 