Regards ssl. Letsencrypt works fine, I use it on my ec2 hosted sites*
More recently cPanel also automatically issue free (legit, not self-signed) ssl certificates for sites on cPanel servers since they became a signer, like lets encrypt they are short-expiry certs, but the cPanel setup auto renews them. Name based SSL of course, but I think that enough browsers support this decade old technology now.
* Contrary to opinion on page 1, I have plenty of sites run just fine on lowly micro or even nano ec2 instances, IF you take the time to set them up of course, nightly snapshots, home on an ebs also housing the mysql and cron spool, appropriate apache, php and mysql config for instance size, fail2ban rules to kick useless seo leech bots and basic dos protection, practice doing an instance swap (and/or be prepared to go to load balancing setup) if it hits the fan and you need to step it up... of course for a one-off site a turn-key solution is better, but when i have sites unsuited to shared hosting, ec2 is my go-to.