* Nagios performance data (e.g., missing days)
* IPv6 support (e.g., through gnutls-cli)
* test for https://revoked.grc.com (should give a critical status)
* fix OCSP checks
* Use nmap --script ssl-enum-ciphers  instead of SSL Labs? 