Server Expert Wanted to Fix some Issues for ASV Pass

Hi, I have 3 Medium issues to pass ASV. I need some experts to help me to fix these issues below:

ISSUE 1: HTTP Security Header Not Detected
(X-Content-Type-Options HTTP Header missing on port 80.)
(X-Content-Type-Options HTTP Header missing on port 52224.)
(X-Content-Type-Options HTTP Header missing on port 52223.)


ISSUE 2: TLS Padding Oracle Vulnerability (Zombie POODLE and GOLDENDOODLE)
(The server returns valid data in response to valid padding with an invalid MAC)


ISSUE 3: Web Server Predictable Session ID Vulnerability

And installing an SSL certificate properly for the server.