You mean a redirect to <https://one.one.one.one/>, but that's beside the point.

Can you or can't you get a certificate for an IP address to "do SSL" (TLS) that is trusted by major browsers?