http://startssl.com/ . $0/year. No bullshit.
It's pure profit/rent seeking. That same $25 applies regardless of the reason. OpenSSL compromised? Fuck you, pay me. Miskeyed the CN? Fuck you, pay me. Want a different type of cert for the same domain? (XMPP instead of web?) Fuck you, pay me. You get the idea. It doesn't cost $25 for a few byte fingerprint to be automatically appended to the end of a file.
In some of these cases they don't even need to revoke the other cert, just delete the erroneously created one from their system because it was never used anyways!
Never mind the fact that their UI would have been an embarrassment a decade ago, and they absolutely require certificate-based login to get into the UI, which is a huge PITA.
Have you seen the article with Cloudflare and Globalsign's CRL?
So yeah, $0/year, but definitely not "no bullshit."
Also, if you read the Namecheap promotion page, they explain that they are donating $0.5 to Fight for the Future for every purchased certificate.
Yes, but you can donate almost 4x that with the money you save. It's hardly a reason to choose Namecheap.
I always found those "$x from your purchase will be donated" annoying. How about you let me keep my $0.5 and I'll donate it to whoever I want? I might not even want to support the organization they chose!
I don't trust Fight for the Future. Too many times I've gone to the page for one of their causes, and found a prominent form asking for my email, sensationalistic claims about the issue that included outright factual errors, and no link to the actual text of whatever bill they were up in arms about.
Why not donate to the EFF instead? The EFF is occasionally wrong, too, but I never get the impression when the EFF is wrong that they are deliberately being wrong in order to stir up more interest. Also, EFF donations are tax deductible.