The hosting should probably leverage letsencrypt.org certificates to avoid scary-looking browser warnings: https://letsencrypt.org/getting-started/