actually, HSTS already implement, only option subdomains included has been removed.
You can check with => curl -s -D - https://hoa-project.net/Fr/ -o /dev/null
The cipher rules already set as better we can. (as mozilla generator recommend)
The imirhil cipher check are pretty rude!
try google.com, paypal or amazon, their are pretty close to us.