Recently, many certificates have been involved. At present, I know the longest one is StartSSL The certificate can be signed for 3 years, but some browsers show insecurity, such as Firefox, so they gave up.
What the SSL certificate is is not explained here. The AlphaSSL certificate can be signed for one year with high trust. It has SHA-256 bits. The most important thing is to support pan domain names.

Update on January 9, 2018: Add the address of the certificate issued by One Key Russia: https://assl.space , the signing and issuing steps are similar! Please provide your own translation in Russian~The message comes from: If you have fun
1、 Generate CSR and KEY
open Online generation website of CSR file , fill in relevant information. To apply for a universal domain name certificate, fill in the domain name: *. xxx.com, and the email must be the same as the domain name Whois or the domain name email.

2、 Request an AlphaSSL certificate
Copy the content of the CSR file generated above Open AlphaSSL Certificate Request Page , and paste it. The email address is consistent with the generated csr!

Click to verify


Click the email you just filled in. Wait a few seconds to a few minutes.

The application is successful. Enter the email and click the verification link.

Wait 2-3 minutes, and the certificate crt will come down. Please check your email.

See the effect after installation.