NeverSSL is the way to go - they have a number of cache-busting tricks that I haven't seen on other sites.