Seems that I might not need an HTTPS server in the first place!
I've been redirecting Scratch 3 translate calls to a python HTTPS server but wanted to try out making a NodeRED one instead
I had believed that once a browser makes an HTTPS request, if it got redirected, then the alternative server also needed to be HTTPS as well but seemingly not 
I think I got the (wrong) idea from trying to make a call from a modified .js script running on the Scratch HTTPS site to a http server and failing - so I just assumed that re-directs also needed to go to an HTTPS server
Happy to be wrong 