AFAIK Mozilla is trying to make https certificates free for everyone.

Edit: Here's the link: https://letsencrypt.org

Superfish was because the laptop manufacturer bundled adware which added its own root certificate that was broken, they aren't able to add root certificates in this case.