Reply to post:

"still supports TLS1.0"

If that server is handling card data (and not handing off to a payment gateway), it's not compliant under PCI DSS 3.2.1 - SSL 3.0 and "Early TLS" (1.0) got the chop in June.