Appears to be working great, thanks!

Btw, these days, you don't need to buy a cert. You can get a free one with LetsEncrypt that lasts 3 months and then you set up certbot via cron to automagically renew the cert for you.