Disable old TLS versions

tls-protocol

Your server still negotiates TLS 1.0 or 1.1, both long retired and rejected by current clients. Offer TLS 1.2 and TLS 1.3 and nothing older.

Your stack

CDN and edge

Cloudflare AWS CloudFront

Web servers

Nginx Apache

Cloudflare

1 Go to SSL/TLS > Edge Certificates
2 Set Minimum TLS Version to 1.2

Cloudflare docs

Does your app still have this?

Scan your domain