Use “fullchain.pem” for ssl_certificate. It has the certificate plus the chain back to the CA.
If you want a better score, also look into customizing the nginx SSL configuration so you’re using custom-generated DH parameters.
Use “fullchain.pem” for ssl_certificate. It has the certificate plus the chain back to the CA.
If you want a better score, also look into customizing the nginx SSL configuration so you’re using custom-generated DH parameters.