To be discussed, but KEX hash and PKCS are "onvoldoende" in TLS-guidelines, so status fail and score penalty seems fitting

Author: mxsasha

checks/scoring.py

@@ -199,12 +199,12 @@
 TLS_KEX_RSA_PKCS_GOOD = FULL_WEIGHT_POINTS
 TLS_KEX_RSA_PKCS_OK = FULL_WEIGHT_POINTS
 TLS_KEX_RSA_PKCS_BAD = NO_POINTS
-TLS_KEX_RSA_PKCS_WORST_STATUS = STATUS_NOTICE
+TLS_KEX_RSA_PKCS_WORST_STATUS = STATUS_FAIL
 
 WEB_TLS_KEX_HASH_FUNC_GOOD = FULL_WEIGHT_POINTS
 WEB_TLS_KEX_HASH_FUNC_OK = FULL_WEIGHT_POINTS
 WEB_TLS_KEX_HASH_FUNC_BAD = NO_POINTS
-WEB_TLS_KEX_HASH_FUNC_WORST_STATUS = STATUS_NOTICE
+WEB_TLS_KEX_HASH_FUNC_WORST_STATUS = STATUS_FAIL
 
 WEB_APPSECPRIV_X_FRAME_OPTIONS_GOOD = FULL_WEIGHT_POINTS
 WEB_APPSECPRIV_X_FRAME_OPTIONS_BAD = NO_POINTS