Right, that one is a bit more tricky. What I've done there is use Cloudflare's services. Have the CNAME handled by Cloudflare and have it go through their netw

Right, that one is a bit more tricky. What I've done there is use Cloudflare's services. Have the CNAME handled by Cloudflare and have it go through their network. Then add a Page Rule that redirects http to https once you've activated their SSL/TLS feature. You can do all of it using their free services.