Normally yes but it will be really complicate to deploy new certificat each 2 month.
Prefer use a self signed certificat if you want something free (OCS don't need an authority to be secure because you validate the server by copy the public certificat on the client)
