Free and automated SSL certs for all paid Heroku dynos are now generally available, issued by letsencrypt.

https://blog.heroku.com/announcing-automated-certificate-management