SSL

CertBot

https://certbot.eff.org/

Online checking

https://www.ssllabs.com/ssltest/

https://www.whynopadlock.com/

Nginx SSL

# Generate CSR
openssl req -nodes -newkey rsa:2048 -keyout domain.com.key -out domain.com.csr
# 
openssl dhparam -out /etc/ssl/dh.pem 1024

openssl #nginx

Nginx config generator

https://mozilla.github.io/server-side-tls/ssl-config-generator