SSL/TLS Deployment Best Practices v1.3 (ssllabs.com)

TLDR

Read more