Thanks! But actually, it pains me that we're still showing a SHA-1 cert.

Because bureaucracy, we're still waiting on a replacement SHA-2 cert, which once installed will bring our score up to an A+ like this:

https://www.ssllabs.com/ssltest/analyze.html?d=staging.18f.u...

We're changing up processes internally that will speed things up. The subject of a future post!

EDIT: And yeah, we're aware of the notalone.gov issues. There's some legacy infrastructure there, but we'll try to get it fixed up. Our future sites will be stronger.