Configuration Builder
Web Server
NGINX
Recommended for high performance deployments
Apache
Apache 2.4+ hardened SSL deployment
HAProxy
Enterprise load balancer configuration
Security Profile
Modern
TLS 1.3 only
Highest security
Highest security
Intermediate
TLS 1.2 & 1.3
Best compatibility
Best compatibility
Legacy
Old client support
Lower security
Lower security
Domain
Certificate Path
Private Key Path
Security Features
HSTS
Strict transport security
OCSP Stapling
Faster certificate validation
HTTP/2
Enable modern protocol support
Security Headers
XFO, CSP, HSTS, Referrer
Ready To Generate
Select your server, profile, and security settings to generate hardened production ready SSL/TLS configurations.