Yes, minimum set to TLS 1.2. This setting doesn't appear to apply to r2 buckets with custom domains.