Hello @Warwick Foster
You are using App Service Plan S1 with Custom domain and SSL features.
App Service Plan D1 also supports Custom domain feature but no support for SSL feature
So, if you switch App Service Plan from S1 to D1, Custom domain will be preserved and SSL will be unavailable and removed.
https://azure.microsoft.com/en-us/pricing/details/app-service/windows/