In the ssl virtual host fragment:
SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM
SSLCertificateFile /etc/ssl/apache2/wxs.crt
SSLCertificateKeyFile /etc/ssl/apache2/wxs.key
SSLCertificateChainFile /etc/ssl/apache2/sub.class1.server.ca.pem
SSLCACertificateFile /etc/ssl/apache2/ca.pem
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
SSLOptions StrictRequire
SSLProtocol all -SSLv2
This is for StartSSL.com certs.