An interesting aspect of StartSSL is that they require physical residence addresses for natural persons even for their low-verification certificates. This seems a bit strong for “validate that the site that I'm talking to is ‘legitimately’ bound to name X”; this is the reason I've been on the fence about going that route.