Bad SSLLabs score

Right now we get only a B at the Qualys SSL Labs test.
Let's fix / improve that!

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information