I enabled SSL on the blog, but I'm not forcing it yet, still too much to tweak.
It's all thanks to the organization https://letsencrypt.org , which hands out certificates to anyone who wants one, and some handy software installs them on Windows Server (on Linux, support is native). I read about the software from a well-known dude https://weblog.west-wind.com/posts/2016/Feb/22/Using-Lets-Encrypt-with-IIS-on-Windows