You can get A+ with a 2048-bit key, and while keeping support for most of the Internet users[1]. You just won't get 4x100. But if you want to, in addition to st

You can get A+ with a 2048-bit key, and while keeping support for most of the Internet users[1]. You just won't get 4x100. But if you want to, in addition to steps from OP, drop tls1 and 1.1, leaving only 1.2. [1] https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29 https://wiki.mozilla.org/Security/Server_Side_TLS#Intermedia...