@mmn @windigo My biggest objection to #StartSSL (besides endorsing the CA mafia at all) is that when there’s a big flaw like #heartbleed, those gratis certs cost money to revoke. Better to pay up front and revoke without added cost. (NOTE: I am currently using them for this domain.)