Thanks! The-PWA-Book was a great help.
The good news is that I already had a wildcard SSL cert for our domain. So it was easy enough to import into IIS.
The one thing I would add at the end is the pswa directory when accessing the site since the pswa content doesn’t go into the default web site.