TLS-OLD-PROTOCOLS
TLS 1.0 or 1.1 still accepted
What it means
These versions have known weaknesses and are refused by modern clients. Accepting them lowers the security grade of the site.
How to fix it
- 1Restrict the server to TLS 1.2 and 1.3.
Re-check after the change
DNS changes can take up to the record's TTL to be seen; use Re-run on the result page to bypass our 10-minute cache.