Admins Handbook

/etc/nginx/ssl
openssl req -new -newkey rsa:2048 -nodes -keyout *.mydomain.com.key -out *.mydomain.com.csr

Inside config:
/etc/nginx/sites-available/default

ssl on;
ssl_certificate /etc/nginx/ssl/*.mydomain.com.crt;
ssl_certificate_key /etc/nginx/ssl/*.mydomain.com.key;
ssl_trusted_certificate /etc/nginx/ssl/chain.crt;
ssl_dhparam /etc/nginx/ssl/dhparam.pem;

chain.crt:
AlphaSSL SHA-256 R1 Intermediate Certificates (DER64)

dhparam.pem:
openssl dhparam -out dhparam.pem 4096