https://www.troyhunt.com/the-6-step-happy-path-to-https/
Excellent blog post explaining how to upgrade a web site to HTTPS safely. Includes also a lot of links to good resources on web apps security.