It seems that <https://letsencrypt.org> is a new CA that we could use to provide certificates for domains. Two of the advertised features seem interesting:- automatic renewal- free of chargeIt is sponsored by Mozilla and the EFF (and others) so it seems legit. It seems too good to be true, so I wonder whether there is a catch.