(also I'm really sure you have good reasons for using geotrust but - lets encrypt tends to have
really nice automatic renewals (since they have shorter cert validity) on most platforms. That +
ssl-config.mozilla.org (no IIS there though) is my goto for most of my SSL needs