@troyhunt took your advice & enrolled my site with @Cloudflare - awesome experience, SSL and HSTS enabled after no more than 30 mins