A few of the CAs have in the past offered certificates tied to personal email addresses for cheap as free for years in the hopes that S&#x2F;MIME catch on. Those are typically fine for HTTPS client certificates too, but the bootstrapping problem is essentially the same for both. To date no one has really managed to get certificates easy enough to use for the average lay person nor adoption common enough for a lay person to need to overcome the learning curve.