Oh my god, I am sorry for this stupid thread.
After I installed Let's Encrypt, the apache directive
Header always set Strict-Transport-Security"max-age=31536000; includeSubDomains"
was inserted to every vhost.conf of a domain which I enriched with a new SSL certificate from Let's Encrypt.
I...