How the hell did you get an F? Do you not have SSL at all?

I ran into something similar. In my case, it was due to nginx running with an old (vulnerable) version of openssl.

Old version of OpenSSL. Still vulnerable to padding attack.