The guides online will tell you that this isn't easy, but it's actually really easy and only a one-time process that takes about 10-20 minutes depending on your technical skills.
This guide takes from raw shared hosting service with a domain attached to it and no HTTPS support, to full SSL support that auto-renews every 60 days without paying a dime.
The key is acme.sh
Thank you so much to that team. Support them if you can.