I just looked at their docs, and frankly their documented process is startlingly idiotic. They say to do exactly what you’ve done, but then note at the bottom of the page that “Web client with your domain name doesn’t match the SSL certificate.” So they’re telling you to do something that will generate certificate errors, knowing it will generate certificate errors.
You can still use https, but you’ll have to bypass the cert errors.