The only difference between what they're doing and what every other SSL issuer is doing already is 20 bucks. A cheap-o certificate from GoDaddy or your favorite reseller does no more than validate domain ownership by e-mail as this freebie does.