Recommended configuration for a general-purpose server
For modern clients that support TLS 1.3, with no need for backwards compatibility
For services accessed by very old clients or libraries, such as Internet Explorer 8 (Windows XP), Java 6, or OpenSSL 0.9.8