SSL error on some websites

Some websites such as https://ebanking1.ccb.com.cn/ cannot be loaded due to SSL_ERROR_UNSAFE_NEGOTIATION at Tor browser 12.
It supports cipher suites like TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, so it doesn’t look like this is caused by disabling SHA-1.
Setting security.ssl.require_safe_negotiation=false can connect properly.