A lot of time has passed… But maybe someone else will come across it here
The problem was actually just something “internal to the company”. I had used the wrong link. With the correct one, the certificate was classified as secure and so we can now communicate with https 
So to summarize: Go through the tutorial step by step BUT IMPORTANT: Leave out the SecurityConfig! Otherwise you will have to start from the beginning.