It's really impossible to give you a concise answer, because there are many details to take care of. My advice is to download the SSL/TLS Deployment Best Practi

It's really impossible to give you a concise answer, because there are many details to take care of. My advice is to download the SSL/TLS Deployment Best Practices guide: https://www.ssllabs.com/projects/best-practices/ which covers virtually everything you need to know on this topic.