CLI command to show profiles running SSL3, TLS 1.0, TLS 1.1

From tmsh you should be able to use the following command if you're looking for it being disabled with the options command.

show running-config all-properties | grep -E "client-ssl|server-ssl|tls"

I can't remember the exact way these options are listed via the command line but you should be able to quickly figure that out with the text that comes up and then just add additional items to your grep filter for those specific items. Any profile name with no text immediately after it should have those items enabled.