More importantly, your server is sending the "short chain" (ssl checker) which does not support older Android devices. The default is the "long chain" which does support old android so someone specifically chose that.
I am not familiar with your server "Flywheel" (from the response headers) so do not know how to advise further. Here is good background on the choice of these two chains