Check certificates on more STARTTLS services

Certificate checks now support additional services that negotiate TLS after connecting, including supported mail and FTP ports. The domain view identifies connections that used opportunistic TLS so you can distinguish them from services that start with TLS.