What are the best places to get a SSL/TLS certificates?

Running your own CA costs you no money, but will cost you a certain amount of time and effort; moreso if you do it right. A good admin who knows what they are doing can set up in an hour or so, but you will also have the ongoing task of adding your CA to the trust store for the browsers you use.