[blazespin]

Certificate revocation infrastructure (OSCP or CRL server) is something that needs to be maintained constantly (versus certificate requests, which are a one shot deal). In order to maintain that revocation, they have to keep serving it out for as long as someone might use your cert. It makes perfect sense to charge for it.

[makomk]

The certificate revocation infrastructure is something they're required to maintain in order for any of the browsers to actually accept their certificates, though.