You can still get paid certs, but the max validity period is shrinking, to 45 days in 2027 https://blog.nameshield.com/blog/2024/10/17/ssl-tls-certific...