This question already has an answer here:
I know nothing about encryption, SSL, TLS, certificates and have come across several companies offering free SSL/TLS certificates.
How trustworthy are these offers? Why would I want to adopt this change when I am not sure about if I can trust those offers?
More so, could the providers of such certificates snoop on the traffic that goes between the browser and the server, ultimately given authorities that either force the cert providers to do so (government legal action|NSA|etc.) or the providers themselves willingly doing so, a back door of some kind to tap into "secure" and "encrypted" traffic?
I find it hard to believe something that is given for free should increase the security of many many websites. More so I might even think this is some kind of con strategy so that governments|agencies|etc. can more easily snoop on traffic by either having some kind of master key copy or another technique unknown to myself that involves issuing "secure" certs while in fact they are not.
Forgive me my lack of knowledge in this field, perhaps I am mixing a few terms here, in any case I am having a hard time trusting this initiative. Am I simply too paranoid or have the bad news of the past increased my sensitivity towards this?