Nmap has some very useful SSL scripts, such as ssl-enum-ciphers, ssl-heartbleed, ssl-poodle, ssl-ccs-injection and this one for testing Diffie-Hellman configurations: https://github.com/eSentire/nmap-esentire