Everything I'm seeing from Google makes it look like crypto incompatibility. Certs, client OS, OpenSSL, browsers, mod_verto all come into play.
I did see someone say something about having FS & web server certs that match. Does a FS restart fix it? Wondering if Let's Encrypted updated the certs...