What is a reasonable and reputable SSL certificate signing authority -- and how do they verify the domain in the simplest case?  Do they simply send an email to the Technical Contact for the domain name like when initiating a transfer, and then boom, verified certificate?
How do SSL certificate authorities verify domains?
domains;https;security certificate