Today, Azure has made security even easier with the introduction of App Service Certificates, right in the Azure App Service Site Blade. More info here

From there under private certificates, you can create a single domain certificate which will cover you for 6 months.

This offering creates certificates which are not wildcard certificates so that means you'll have to create a new certificate for each Fully Qualified Domain (FQL) you have bound to your site.

The really really cool part is that a month before the certificate is about to expire, the "managed" part kicks in and generates a brand new certificate for another 6 months. Simple. The offering is in preview at present but from my experimentation with it, appears to be pretty solid.

This really is Microsoft putting security up front and centre with this free offering and the automatic renewal to keep your sites protected through TLS.

Enable the awesomeness

Below are step-by-step instructions in how to set this up in 4 easy steps for your existing sits.