It is no suprise that scammers have taken advantage of getting SSL certs since you can now get them with no financial cost or checks. Letencrypt.org or cloudflare.com both allow you to get SSL connections for free with nothing more than an email address needed. While there service are good for genuine website to get themselves a SSL cert they were bound to be abused by the scammers, let just hope that a solution is found before these free SSL certs end up not being trustworthy and all the existing certs get revoked