Have you seen this HTTPS migration cheat sheet?