DNS Certification Authority Authorization (CAA) Policy / DNSSEC for whonix.org / ssllabs.com test results / OCSP ERROR: Exception: connect timed out [http://r3.o.lencr.org] / Must-Staple

Our website got B as our SSL seems to support alot of weak Diffie-Hellman key exchange parameters

B for: 94.23.250.81

A+ for: 2001:41d0:2:7d51:0:0:0:0

but it has problems as well such as: