Checks

OCSP Must-Staple is set

The certificate requires a stapled OCSP response.

Why it matters

Clients that honor Must-Staple will reject the connection if the server does not staple a fresh OCSP response.

What to do

Keep OCSP stapling enabled on the server. This result only records that the certificate asks for it.

Reference

Certificate validity, protocol version, and cipher choice determine TLS trust and strength.

Mozilla SSL Configuration Generator