If CAcert isn't usually trusted and StartSSL is not free for commercial use, are they really alternatives?