> You may want to update OpenSSL.

Thanks but I did and almost zero browser was able to use draft 26 or 28. Therefore I downgraded OpenSSL from 1.1.1-pre8 to 1.1.1-pre2 (draft 23).

Although TLS 1.3 has been finalized, Openssl 1.1.1 is still work in progress.

Tested with latest Opera, Palemoon, Blackhawk, Vivaldi and Slimjet. I don't use Chrome nor Firefox.

Had to disable CT too, generating way too much errors from older browsers. Seems this project is unmaintained for a year.