I mean... your cost argument is weak, almost meaningless. Just focus on the trust angle, it's a reason enough against PKI/SSL.
IIRC they used to have a ridiculously awful method for revoking a cert. Is that still the case?