Depends what your site is all about. If you are selling products and services than you must have an SSL certificate. On the other hand, if you have a personal site, forums or any other type which doesn't involve confidential information and sensitive data then you don't really need it. ;)