Thanks. We also have a step-by-step configuration guide called SSL/TLS Deployment Best Practices. I've just submitted it here:

    https://news.ycombinator.com/item?id=6447518

In the nutshell, it's a continuously updated "everything you need to know" about SSL/TLS.