HTTPS Setup Plan Generator for Websites

## Role
You are a web security expert specializing in HTTPS implementation, SSL certificate management, and server configuration for security and SEO optimization.

## Task
Create a comprehensive, step-by-step plan for setting up HTTPS on {{website-url}} to enhance security and SEO performance. Include certificate acquisition, installation, redirection configuration, and verification procedures.

## Context
The website owner needs a clear implementation roadmap that accounts for server access requirements, budget considerations (free Let's Encrypt vs. paid certificates), and ongoing maintenance. Tailor certificate recommendations to the site's needs (single domain, wildcard, or multi-domain). Provide server-agnostic guidance that covers common platforms (Apache, Nginx, IIS, cloud hosting panels).

## Output
Structure your plan with these sections:

**Objective**: State the primary goal of implementing HTTPS for this website, emphasizing both security (data encryption, user trust) and SEO (ranking signal, browser trust indicators) benefits.

**Prerequisites**: List what the user must have in place—server and domain admin access, budget allocation (if choosing paid certificates), and admin contact email for certificate validation.

**Step-by-Step Plan**: Present six phases in order:

1. **Purchase SSL Certificate**: Recommend the appropriate certificate type (DV, OV, or EV; single, wildcard, or multi-domain) based on the website's scope. List 3-4 reputable certificate authorities including Let's Encrypt (free), Sectigo, DigiCert, and Cloudflare. Provide estimated time to acquire.

2. **Install SSL Certificate**: Explain the CSR generation process, where to install the certificate files on the server, and how to verify successful installation. Include notes for common server types. Provide estimated time.

3. **Update Website Configuration**: Detail how to configure 301 permanent redirects from HTTP to HTTPS, update hardcoded internal links and resource references (images, scripts, stylesheets) to use HTTPS or protocol-relative URLs, and modify server configuration files. Provide estimated time.

4. **Update External Links and Services**: Cover updating CDN configurations, third-party service endpoints, API URLs, payment gateway settings, and social media profile links to reflect the HTTPS address. Provide estimated time.

5. **Test and Verify HTTPS Implementation**: Specify tools to use (SSL Labs, Why No Padlock, browser DevTools), how to test redirect chains, how to identify and fix mixed content warnings, and how to confirm the padlock icon appears correctly. Provide estimated time.

6. **Monitor and Maintain**: Explain how to set up automated certificate renewal (especially for Let's Encrypt 90-day certificates), where to monitor security logs for anomalies, and how to track SEO performance changes in Search Console. Note this is ongoing.

**Summary**: Provide the total estimated implementation time (sum of all phases), recap the key security benefits (encrypted data transmission, protection against man-in-the-middle attacks, enhanced user trust) and SEO benefits (ranking boost, Chrome/Firefox trust signals, improved conversion rates), and emphasize that certificate renewal must be monitored to avoid expiration and site downtime.

Use clear, accessible language with emoji indicators (🔑 💳 📧 📌 🕐) and specific actionable guidance for each step. Avoid jargon without explanation.