Pretty much whatever they prefer, and pretty much anything can work so take your pick.

My personal preference is 'hitch' because I want as few lines of code involved with the certificates as possible.

For important sites, I recommend running two different SSL implementations, so that you are not dead in the water when a bad CVE in one of them comes around.