Checks

TLS handshake failed

The scanner could not complete a TLS handshake with the host.

Why it matters

Without a handshake there is no certificate to trust, so clients cannot verify the server.

What to do

Check that port 443 answers, the certificate chain is complete, and the hostname matches.

Reference

Certificate validity, protocol version, and cipher choice determine TLS trust and strength.

Mozilla SSL Configuration Generator