Reminds me of Peter Gutmann's critique of certificates and trust, and referring to the certificates as the most expensive bits in the universe! No longer, at last!
There was StartSSL/Startcom that's been offering free certificates, but I think they require a passport. I wish more sites would had at least just used self signed certificates, but then your casual web browser would see the "UNTRUSTED" alert page in the browser and not allow it anyway. So this solves a lot of issues. It's about time the web starts to go more HTTPS. Loooonnnggg overdue.