Let's Encrypt Demo: ssl-stable
nginx ssl config
server {
    set $APP_BACKEND php70_backend;

    listen       80;
    server_name ssl-stable.php79.net www.ssl-stable.php79.net;
    include /etc/letsencrypt/php79/well-known.conf;
    root   ...

	...

    listen 443 ssl http2;
    ssl_certificate /etc/letsencrypt/live/ssl-stable.php79.net/fullchain.pem;
    ssl_trusted_certificate /etc/letsencrypt/live/ssl-stable.php79.net/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/ssl-stable.php79.net/privkey.pem;
    include /etc/letsencrypt/php79/ssl-stable.conf;

    # Force https
    if ($scheme != "https") {
        return 301 https://$host$request_uri;
    }
}
Oldest compatible clients: Firefox 1, Chrome 1, IE 7, Opera 5, Safari 1, Windows XP IE8, Android 2.3, Java 7