is needed to test some profiles/protocols which reject certificates with unsupported versions. (cherry picked from commit df316fd4)