On one server, I have a file /etc/letsencrypt/options-ssl-apache.conf which has:
/etc/letsencrypt/options-ssl-apache.conf
SSLEngine on SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -T