Google have said that both having SSL is beneficial and that having a fast website is beneficial. I'm trying to work out the best tradeoff for both SEO and user experience.

One of my (very) small business websites runs on Wordpress on HostGator in the USA. Currently it sits behind CloudFlare free, which gives it a poorly functioning SSL. You can go to the root website on https, but images don't load and because the web server isn't set up to respond to https requests (that may just be my hosts file hotlink protection). The links to other pages are http not https, which could be because of the template I use, or Wordpress. So in effect the text of my front page is SSL, but nothing else. However it is fast - the whole site (including 74 resources, image heavy) loads in 1.9 seconds, probably because many of the resources are served out of Cloudflare in NZ.

Site performance (from webpagetest.org)
Cloudflare: 1.9s to load, 0.9s to redisplay
Direct to the US: 8.6s to load, 3.2s to redisplay

I could get an SSL certificate and have it installed for a small amount of money, but CloudFlare wouldn't work as it's not worth paying the significant monthly fee for this website. That would mean traffic goes direct to the US, or paying for another CDN that has an NZ or maybe Aussie node. I have done it with AWS Cloudfront before, the costs are relatively reasonable, but it's Sydney based not NZ. A CDN for an https site may be more expensive - though the website traffic is 1GB on a busy month so not much traffic

Thoughts? Should I go for
1) Website on Cloudflare with poor SSL, cheap
2) Website in the US with SSL, no CDN, cheap
3) Website in US with SSL, AWS Cloudfront as CDN (should be cheap enough)
4) Website in US, another CDN (suggestions), costs unknown