I've had a lot of good experiences lately using SSLMate (https://sslmate.com/ https://sslmate.com/) to automatically buy, download, generate chains, and renew c

I've had a lot of good experiences lately using SSLMate (https://sslmate.com/ https://sslmate.com/) to automatically buy, download, generate chains, and renew certificates. Then, I use Mozilla's SSL configuration generator (https://mozilla.github.io/server-side-tls/ssl-config-generator/ https://mozilla.github.io/server-side-tls/ssl-config-generat...) to set up the cypher suite. Those two together will have get you running very quickly. It's certainly a good idea to know what you're dealing with, but there are smart people behind both of these services that really simplify things.