It's easy to get a good configuration for popular servers from https://mozilla.github.io/server-side-tls/ssl-config-generat... and certificates are really easy to get from Let's Encrypt, both with the official client or others such as acme-tiny or simp_le if you don't like the official one. Headaches are not an excuse any more.