Yep. Most smaller businesses struggle to justify the costs of regular certificates (because let's be honest, the certification is BS – certificate theft is a bigger threat than fraudulent registration), gods forbid a wildcard cert. EV are not even an option.
And if you want SSL for your private website, tough luck.