My personal preference is 'hitch' because I want as few lines of code involved with the certificates as possible.

For important sites, I recommend running two different SSL implementations, so that you are not dead in the water when a bad CVE in one of them comes around.