Checks the HSTS header for max-age, includeSubDomains and preload, and verifies the HTTP→HTTPS redirect.