The configs below are for Linux.
These are the most competent tunings I've found.
Test your current score here: https://www.ssllabs.com/ssltest/
You must have a certificate issued by a trusted certification authority.
These authorities issue certificates for free and I tested them by myself: