If an applet is executed in a sandbox, it cannot damage anything (I believe). So why the need to sign it with a certificate?
I am a freelance programmer and developed an applet that people found useful (units-in-java on SourceForge). It is blocked now.
I am not able to pay a lot of money for a certificate, so I have to withdraw it. Any reason for blocking?