There is no way to do this without a certificate for static.example.com that will not trigger a security warning or prompt in some browsers (particularly Internet Explorer).
GoDaddy sells SSL certificates for $30ish. I'd say spring for the little bit of cash.