I can get free certificates from DigiCert as needed – I just need to know what domain(s) are needed. Well, that and a way to get Apple devices to trust the certificates without needing to go to Apple servers, if I remember our JCCC3 problems correctly.