Recently, many certificates have been involved. At present, I know the longest one isStartSSLThe certificate can be signed for 3 years, but some browsers show insecurity, such as Firefox, so they gave up. What the SSL certificate is is not explained here. The AlphaSSL certificate can be signed for one year with high trust. It has SHA-256 bits. The most important thing is to support pan domain names.
Update on January 9, 2018: Add the address of the certificate issued by One Key Russia:https://assl.space, the signing and issuing steps are similar!Please provide your own translation in Russian~The message comes from:If you have fun 1、 Generate CSR and KEY openOnline generation website of CSR file, fill in relevant information.To apply for a universal domain name certificate, fill in the domain name: *. xxx.com, and the email must be the same as the domain name Whois or the domain name email.
2、 Request an AlphaSSL certificate Copy the content of the CSR file generated above OpenAlphaSSL Certificate Request Page, and paste it. The email address is consistent with the generated csr!
Click to verify
Click the email you just filled in. Wait a few seconds to a few minutes.
The application is successful. Enter the email and click the verification link.
Wait 2-3 minutes, and the certificate crt will come down. Please check your email.