The secure HTTPS configuration of a website can be very tedious and prone to mistakes. It's suggested to use the Mozilla SSL configuration generator. It will help to generate secure SSL configurations based on the web server. Refer to https://mozilla.github.io/server-side-tls/ssl-config-generator/ for details.