tls-server: Make CertificateRequest conditional in old TLS versions