Curious how everyone manages ssl certificates in their separate organisations . Has been abit of an ongoing discussion recently for myself. For internal servers that require it (you could argue all servers that support it require it) obviously its alot easier to convince others from a cost point of view that its needed but for other applications/servers that can run without certs such a not widely used services how do manage these sites and convince the rest of the organisation to spend money in getting third party certificates ?.