The HSTS header was missing in the HTTP response.