Recent OpenBSD should be able to do modern TLS, and probably ACME, which would have been more interesting.