StartCom cert expiration
Our StartCom cert expires July 21. Since new StartCom certs aren't trusted, we should change the CA or switch the Kwant website back to http before that.
I believe that at this stage it would be the easiest to adopt !22 (closed) (since it's already done) and serve Kwant from the Delft server, while keeping webfaction as a mirror. Other options are: webfaction+letsencrypt (requires setting up a webfaction "app"), buying a cert from a different CA, and plain http.