Yes, you have to pay for an SSL certificate. Though you pay for it, it's really a worthier thing as it provides data encryption to your site contents. Of all other advantages, it makes your visitors feel safer. Normally positive SSL certificate costs around Rs. 1000 / Year and this may vary depending on the provider. Check with the various branded players like HIOX India for SSL price details.