The certs the site is using are free, its just that they only last I think 90 days. The script is giving Jonathan trouble which auto renews it and he has to do it manually.
Keep in mind, just because he doesn't login to the front end, doesn't mean he isn't doing stuff on the back end.