The original Orbit Downloader (since 2.7) comes with download.dll that relies to OpenSSL-0.9.8 way for finding SSL/TLS cert's RSA key length, which cause crash with newer OpenSSL (1.0.0 to 1.0.2 only, 1.1.x and newer is not supported).
I made a hack to bypass RSA key length finding routine and it works!
SNI is not supported (yet, don't know if this can be added or not by myself).
Download:
http://o.rths.ml/gpc/files1.rt/Orbitdownloader-tls12hack.7z
EDIT: ... and since there is no SNI support (yet?), for downloading from CF-walled servers, you may need ProxHTTPSProxy's PopMenu TLS 1.3 3V3 and set Orbit's proxy to HTTP Connect 127.0.0.1:8079.