SSL Notes

• Generate a better (2048-bit) Diffie-Hellman parameter.

• “Best” Nginx config for SSL.

• How to configure certificate chains for Nginx.

  Your Certificate  
  Root CA  
  Intermediate 1  
  Intermediate 2  
  .  
  .
  

• Test the SSL config on your server.