Time-Creator.com

GoDaddy is a criminal outfit. They stole a domain from me that I had owned for over 15 years. They have no regard for their customers. :-(

I know its probaly too late to get a refund now, but you probably didn't need to spend so much there.

• Standard SSL is free these days with LetsEncrypt
• For cases where you cant or dont want to use LetsEncrypt, Cloudflare is a good alternative, offering a nice cache and ddos protection service to go with it (and its super easy to set up)
• Netlify is another option if your site is static

Worth noting for anyone else coming to this - don't use GoDaddy. There are so many horror stories and they have in the past been using very shady practices, combined with insanely overpriced products and poor support.

For domains someone like Namecheap or Porkbun are far better. For hosting avoid Hostgator, Bluehost and the rest of the similar looking ones that seem to magically get thousands of 5 star reviews, which then all have high-paying affiliate links.

If you really do need a paid SSL cert for extended validation it very rarely makes sense to overpay for this with your hosting provider or domain registrar as there are sites that just do SSL certs that are a considerable amount cheaper.

Can you explain that a bit? Why does it cost $130 and take so long when there's Let's Encrypt which does it for free in a couple of seconds?

Did you get some special certificate? Even if you buy a regular certificate it doesn't cost more than a few $, definitely not > 100. If it was a EV certificate you should probably know that they are unnecessary and on their way out: https://www.troyhunt.com/extended-validation-certificates-are-really-really-dead/

Edit: Just saw the comment below that asked the same, whoops.

TLS is definitely table stakes, maybe there was some background knowledge you're missing?

Most hosting providers (Netlify is a great one for personal projects as well as ones with heavy traffic) just provide a checkbox "Enforce HTTPS". Or you can go via Let's Encrypt if you're serving files yourself. I still get warnings on your site for images not being served over HTTPS.