Nginx, Apache, IIS and more
Configure the chain, private key and HTTP to HTTPS redirect.
Configure and distribute a cert for *.example.com.
Sign executables and add a trusted timestamp.