Add comments to certificate chain
Enable SSL session resumption
Enable SPDY
Force HTTPS perfect forward security