GoDaddy, for one, has SSL certificates for $30 a year or so.
Save yourself the aggravation, and have the bean counters purchase one. Once installed correctly, all your mobile devices (both existing and new ones) will just work, unless they are *really* old Windows Mobile devices. And, Outlook Web Access users will not have that annoying Red address bar to look at.