they support HTTPS on custom domains now! https://docs.readthedocs.io/en/latest/alternate_domains.html#cname-ssl