An SSL cert starts at like $13 a year, if you can't afford that you shouldn't have a merchant account. There's no need to store credit card information on your server, if you really need it the gateways provide the functionality.