When reviewing http://www.wikilovesmonuments.org/ blog, it became obvious, that

1. it has a valid HTTPS cert,
2. it doesn't yet take full advantage of it by not forwarding HTTP requests yet.

Let's change this.