If you do a search you'll find a number of threads about domain and ssl purchasing. Most are inspired by the same concerns you have. There's a common list that keeps showing up. namecheap.com isn't the only one that gets mentioned a lot, but it's the one I picked