Is your host charging you for an SSL certificate (https)?
Unless you're a bank or something needing extra super-super security, you shouldn't be.
Google and the EFF have put a lot of work into making sure regular business sites have access to https for free. If your host is charging for it as an extra without a "free" tier then change to another host. Seriously.
SSL certificates that make your site use https security are, for normal businesses, free. Don't get scammed.