Let's Encrypt Demo:
ssl-modern
nginx ssl config
server { set $APP_BACKEND php70_backend; listen 80; server_name ssl-modern.php79.net www.ssl-modern.php79.net; include /etc/letsencrypt/php79/well-known.conf; root ... ... listen 443 ssl http2; ssl_certificate /etc/letsencrypt/live/ssl-modern.php79.net/fullchain.pem; ssl_trusted_certificate /etc/letsencrypt/live/ssl-modern.php79.net/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/ssl-modern.php79.net/privkey.pem; include /etc/letsencrypt/php79/ssl-modern.conf; # Force https if ($scheme != "https") { return 301 https://$host$request_uri; } }
Oldest compatible clients: Firefox 27, Chrome 30, IE 11 on Windows 7, Edge, Opera 17, Safari 9, Android 5.0, and Java 8