TLS errors and clients sometimes rejected