I also use startssl because their cert's are for free when you only have one non-commmercial domain!