Redirect from HTTP to HTTPS in Apache
Add newer versions of TLS/SSL protocols; enable HSTS in apache
Sign apache conf files
Add screenshots with insecure content and untrusted certificate problems
Clarify that certificates are free at the beginning
Remove comment about EV certs that is unclear
Clarification that personal details during StartSSL registration should be correct and detailed for cert request to be approved
Clarification comment on client-side certs
Add links to apache conf sigs and comment for gpg sig verification
Explain Apache security directives
Add apache conf for HTTP to HTTPS redirect
Add insecure content and untrusted cert explanation and possible fixes