I finally made full switch to SSL for my website. Thanks to [this](https://hblok.net/blog/posts/2016/02/24/lets-encrypt-tls-certificate- setup-for-apache-on-debian-7/) simple howto on Let’s Encrypt. I had to use the upstream git repo though. The Debian packaged tool, letsencrypt.sh, did not have enough documentation/pointers in place. And finally, thanks to the Let’s Encrypt project as a whole.
PS: http is now redirected to https. I hope nothing really breaks externally.