To answer question #1, a lot of people use the SSL Server test: https://www.ssllabs.com/ssltest/analyze.html https://www.ssllabs.com/ssltest/analyze.html. It's

To answer question #1, a lot of people use the SSL Server test: https://www.ssllabs.com/ssltest/analyze.html https://www.ssllabs.com/ssltest/analyze.html. It's one way to analyze if your certificates and SSL/TLS settings are configured correctly. The results are arguable - getting an "A" does not guarantee safety - but getting an "F" can show that more work needs to be done.