I also don't pass that test, but I don't know how to fix it. Something that bugs me about both this and the SSL Labs scanner is there's no guide to fixing problems. Obviously it's different from webserver to webserver, but I feel like at least Nginx and Apache suggestions should be there. Maybe lighttpd and whatever else kids are using now a days