[SAC] SSL certs for project sites

[Howard Butler]

The browsers are starting to get very aggressive about warning about no SSL for websites, and OSGeo has many project websites that are managed under OSGeo's DNS.

mapserver.org
proj4.org
gdal.org
geotools.org
openlayers.org
postgis.net
deegree.org

How can OSGeo/SAC manage SSL certificate purchases and management for these websites? Is this something SAC should do and OSGeo should pay for? Should we pay for service from something like CloudFlare ($60/yr/site approx)? Something else?

Howard