StartCom/StarSSL has provided fully free certificates for some time: http://www.startssl.com/?app=1
edit: Title is now clearer, I believe the "to customers" portion wasn't initially there. Or I just suck at reading.
They charge for revocation, so it negates the entire idea of a "free certificate" if you can't properly revoke them without forking over money. It literally breaks the entire idea of revocation.
This was made very clear when Heartbleed happened
http://news.netcraft.com/archives/2013/05/13/how-certificate...
They charge for revocation, so it negates the entire idea of a "free certificate" if you can't properly revoke them without forking over money. It literally breaks the entire idea of revocation.
This was made very clear when Heartbleed happened