Just to let everyone know - completed the process of an SSL/TLS upgrade to a LetsEncrypt.org cert. Took a bit of programming on the back end due to an IIS 8.5 bug, but otherwise we were up and running with 25 minutes.