The ssl element configures SSL and TLS. SSL and TLS can be configured separately for each HTTP listener. For more information, see ssl and http-listener.
The pkcs11 element configures the PKCS #11 subsystem, including Certificate Revocation Lists (CRLs) and third-party cryptographic modules. For more information, see pkcs11.