With vulnerabilties being discovered all the time, configuring web servers to pass security checks is an ongoing process. (Another plate-spinning excercise.) The best free audit tool I know is https://www.ssllabs.com/ssltest/ But that site won’t tell you how to configure your software. The configurator from mozilla https://ssl-config.mozilla.org/ does and has been invaluable to me as it …