Actually I found TlsCipherSuite.RSA_WITH_AES_128_GCM_SHA256 and tried that. It connected successfully and I got back these lines (so almost the same thing). Seems close enough for me :)
Control connection was secured using TLS12.
Control connection is using cipher TLS 1.2, RSA, AES with 128-bit key in GCM mode, AEAD.