Update README.md

change URLs to their SSL version, added note about semi-broken SSL notice