See
this DC thread for a free (limited) certificate.
You could also do (full enabled) self-signed PKCS12 certificates, which is okay as well (if the group you share these with is yourself and a few others in your "inner circle", but not commercially).
Self-signed certificates are slightly more problematic, as browsers do not recognize them the first time these are used. However, the browser screen that shows up has a button to view the certificate and when you do, select through the tabs from the new screen and you will find a button to install the certificate. After doing so the problem goes away.
Creating (full enabled) self-signed certificates is not difficult at all.
MS TechNet,
MS Downloadcenter,
Easy-RSA (part of OpenVPN, comes with a straight forward manual),
Java.
