Well if you are using the payflow pro modul yo udont neccessarily need a SSL cert. Verisign cost $399+, I went with GoDaddy turboSSL, $20 :) As long as users see a padlock they're happy.