either you used http, self signed if you did not mind the warning, and i remember there being one company that did offer free certificates that validated, but cant remember the name of it
You're probably thinking of StartSSL, and it was a bit of a pain to get it done.