@JLLeitschuh thx, I bumped to open jdk 11.0.2 and now it seems it uses by default TLSv1.2 and that works fine (it’s not trying with/sees TLSv1.3 - this i don’t know why 
)
JVM: 11.0.2 (Oracle Corporation 11.0.2+9)
...
...
[DEBUG] [org.apache.http.conn.ssl.SSLConnectionSocketFactory] Enabled protocols: [TLSv1.2]