As a data point, the Mozilla "SSL Configuration Generator" seems to be well regarded:

https://ssl-config.mozilla.org

I tend to use it for generating config's for static Nginx sites, though it can do much more. :)