Sieve support for TLS checkers