Issue:
On a Cisco Secure ACS, under Reports / Catalog / AAA Protocol, under the Username entries are prefixed with host/. When clicked through to get to the RADIUS Authentication Detail, under RADIUS Status it says
Authentication failed : 11514 Unexpectedly received empty TLS message; treating as a rejection by the client
Solution:
It appears that a certificate has expired.