@rugk Thank you to emphasis that! I’ve reported it on two TLS scanner to help raise awareness:
https://github.com/ssllabs/ssllabs-scan/issues/367 ( https://github.com/aeris/cryptcheck/issues/21 )
https://github.com/aeris/cryptcheck/issues/21 ( https://tls.imirhil.fr/https used by https://mozilla.github.io/http-observatory-website/ )