If you don't want to pay for an expensive certificate you can get free SSL certificates from http://www.cacert.org
Their root CA isn't included by default on the major browsers but mozilla/firefox will soon include it. Most major
open source operating systems already included it by default, like FreeBSD, OpenBSD, Debian, Ubuntu Edgy, Gentoo, etc.
Just a suggestion
