There are a bunch of good tools like
https://www.ssllabs.com/ and
https://mozilla.github.io/server-side-tls/ssl-config-generat... for getting your SSL configuration right. That said generating the certificate request with various tools can be a pain. We try to address that pain with this tool.