On Heroku you can use the ExpeditedSSL addon and we will even update the certs for you as the security standards change.

https://addons.heroku.com/expeditedssl