If you have a private server then you can get a free SSL using let's encrypt which is a technology which even we use to offer free SSL certificates with affordable hosting.
Yes exactly, https website is now become almost mandatory. You should go with hosting assured companies who follow primary security standards.
You can go with either free or paid SSL certificate providers. Some of the top hosting assured webhosts are:
- NodeSpace Hosting
- Blogvisa Hosting
You can check the hosting assured webhosts here.