It’s possibly not even Discourse at this point. Their system probably doesn’t support modern TLS encryption schemes, which are the default ones enabled nowadays.
Sending them to https://clienttest.ssllabs.com:8443/ssltest/viewMyClient.html and having them send you the results might help diagnose.