I use the semi-official Acme package [0], which handles all that really well. I haven't touched SSL or TLS config for years. I mean, I might be an outlier, but

I use the semi-official Acme package [0], which handles all that really well. I haven't touched SSL or TLS config for years. I mean, I might be an outlier, but this seems pretty standard for Go deployments these days. [0] https://pkg.go.dev/golang.org/x/crypto/acme https://pkg.go.dev/golang.org/x/crypto/acme