So, if I understand it correctly, HTTPS costs developers money (annual rent for renting an SSL Cert). Google too is about to start shaming non-HTTPS connection

So, if I understand it correctly, HTTPS costs developers money (annual rent for renting an SSL Cert). Google too is about to start shaming non-HTTPS connections (according to a recent article). I've heard about the free one-year Cert. Is there any way to do HTTPS all in-house (permanently), without resorting to an external agency?