I'm worried that StartSSL free certs will stop being trusted. I run a service (tny.im) where HTTPS is not essential, but I like to provide it, to secure logins

I'm worried that StartSSL free certs will stop being trusted. I run a service (tny.im) where HTTPS is not essential, but I like to provide it, to secure logins if not for anything else. However, I make little to no money from that website, and so I rather not invest much money in it. By the price SSL certs go, if StartSSL became untrusted, I'd have no choice but remove SSL support, or issue my own certificate which is as bad as not having HTTPS. StartSSL plays an important role in ensuring that all websites, no matter how small, can provide https access. I recommend it to people that are just launching a service; their reaction often is like "SSL? You know how much that costs? I can barely pay for the server!" but they happily go through the trouble of installing a StartSSL cert when they understand that it will only cost them the effort. Without StartSSL these people would never implement https, if for some reason they didn't want to spend money with their project as is often the case with things done in their spare time. Personally this is even more disgusting, because I know for sure that my certificate has not been compromised: two days ago my service was hosted on a server with OpenSSL 0.9.8, and today I was forced to migrate to a new server due to issues unrelated to Heartbleed, and the certificate was not installed before updating OpenSSL to a patched version. And as some users have said, other people may be using StartSSL free certs on systems that don't even use OpenSSL. There's also something we should not forget: free StartSSL certificates are only valid for one year. That means that any cert will only be compromised for, at most, a year. My cert will expire in June, and then I'll be able to issue a new one, which (even if I wasn't sure the current one isn't) definitely isn't compromised.