Best way to get my multisite network HTTPS? What about mapped domains?

Hi folks :slight_smile:

For 2017 I want to get my whole multisite network HTTPS:
- What is the best / simplest / less expansive way to achieve that?
- And what about mapped domain?

Thanks!