Looks like this breaks fetching OpenGraph assets for some popular services, does anyone know which are not compatible? I went TLS 1.2 only a while ago for a personal site, but only tested with Twitter (which does work).

https://twitter.com/AliceWonder32/status/894468549720260608