Just to add: You can use https://letsencrypt.org/ for free HTTPS certs.