Or buy a "real" SSL cert that I don't need to fiddle with every few months.
I think there are some browsers that won't even connect to HTTP/80 without a warning ?
[0]: https://www.namecheap.com/security/ssl-certificates/