What are the best places to get a SSL/TLS certificates?

While running a private CA is not difficult, doing so requires a fairly deep understanding of SSL and how CAs work. If you are not 100% sure how SSL actually works - this might be a bad option, or an awesome way to learn.