Well, cPanel/WHM comes with a Self-Signed SSL, meaning, it's secure, but browsers don't trust it by default.
You can get a normal SSL freessl.com, or geotrust.com (don't know if they accept paypal) in use with secure.yourdomain.com. Or you can get a WildCard SSL that protects all.(secure.domain.com, www.domain.com, domain.com, etc..)
Hope that helps.
CloudRck.com - Host on Cloudrck
Unmetered VPS Solutions at it's finest