Add OCSP stapling.
Enable HTTP Strict Transport Security (HSTS).