Should I disable TLS 1.0 and TLS 1.1. support and get an A at SSL Labs?

[9peppe]

@JuergenAuer

If your certificate renew really works , you may add the domain to the Google Preload list.

@drkirkby: there is an important difference in what a domain is for HSTS and what a domain is for HSTS preload, though.

For HSTS, each subdomain decides for themselves.

For HSTS preload, only the apex domain has control, and every subdomain must abide.

So, preload is something you need to think really hard about, before you do it. And it's not easily or quickly undone.