As indigodaddy mentioned the cert is only signed for www and not the apex. [1]. The alternate name should be one or the other www vs apex. To run a test simil

As indigodaddy mentioned the cert is only signed for www and not the apex. [1]. The alternate name should be one or the other www vs apex. To run a test similar to Qualys one could clone testssl.sh [2] and run against a local development version of the site. requires bash and openssl Some headers may be missing [3]. Follow the links from Qualys and SecurityHeaders to get more information on how to remediate the findings. It might also not hurt to open a ticket with Cloudflare to see what else is going on here if you have a paid account. [1] - https://www.ssllabs.com/ssltest/analyze.html?d=www.teamkennedy.com&latest https://www.ssllabs.com/ssltest/analyze.html?d=www.teamkenne... [2] - https://github.com/drwetter/testssl.sh https://github.com/drwetter/testssl.sh [3] - https://securityheaders.com/?q=https%3A%2F%2Fwww.teamkennedy.com%2F&followRedirects=on https://securityheaders.com/?q=https%3A%2F%2Fwww.teamkennedy...