I suggest Letsencrypt (Mozilla fundation project).
Very easy to setup with certbot.

Then it's a few lines configuration, 2 if you get lucky.
So three command lines. You can use it for your mail too (get proper TLS).