require_cert_revocation_info = false use_ecc_point_compression = true