Well, you all have missed the point. Cost = free. Time = a couple setting in the web sites CMS. The HTTPS gets rid of the annoying popups that point out that the sight is insecure every time someone wishes to log in.

I am a little surprised this wasn't done from the outset since the webmaster would certainly wish to protect his data as well as that of his visitors.