The cost of the certificate is a very small part of the overall cost of a proper SSL&#x2F;TLS implementation.<p>If you don&#x27;t want to exclude older browsers, you need a dedicated IP address, or you need a system to manage putting multiple names on one certificate. Let&#x27;s Encrypt is a great option for multi-SAN certificates, as long as you don&#x27;t care about Windows XP users.<p>If you have any kind of redundancy, doing perfect forward secrecy gets much harder. The open source approaches to scaling TLS along with PFS are bleeding edge, poorly documented, and may involve writing some code.<p>I agree, TLS everywhere is a worthy goal. But I think it&#x27;s easy to underestimate how complicated it can get, especially at scale.