Just wanted to say that if you're on a shared hosting package (or even some VPS/dedicated servers) with cPanel, check if you have LetsEncrypt support baked into your cPanel. It allows you to install a security certificate for free with about 3 clicks. Just search for it in cPanel options. It makes the site a lot more secure; Chrome has started to give me insecure warnings about the BBS now because it expects to see an SSL certificate on all sites EDIT: Noticed you do have one but it isn't forced. It's worth just adding a snippet to .htaccess to make sure it's always forced, as most visitors will be visiting insecurely by default. Will also improve SEO slightly
