Yeah, um, there is absolutely nothing to "secure" on the site, so I didnt bother to do that. I use cloudflare, and it is supposed to automatic ssl, but it doesn't and I dont worry about it, because again, there is literally nothing on my site that is not visible in your blog header. So why bother or pay for it?
¯\(ツ)/¯