Para conseguir disponer de HTTP Strict Transport Security en este test:
https://www.ssllabs.com/ssltest/analyze.html
Editar en el .htaccesss del sitio web:
# Guarantee HTTPS for 1 Year including Sub Domains
Header always set Strict-Transport-Security “max-age=31536000; includeSubDomains”