No, but they do need to get a signed chain-of-trust certificate rooted to a certificate authority recognized by their clients' user agents. They also need a well-defined domain name that was registered through some domain-name registrar, somewhere.
The notion that some parts of the web standard are pay-to-play is actually not new.