Comment by lunarmist

And the nginx ssl config is improperly configured, which would give an F under ssllab's tests.