Free SSL certificates for 2 years with support for up to 100 domains

The Internet on the wave of universal wiretapping and the paranoia associated with it is gradually moving to total SSL. Unfortunately, while this is not very easy to do and usually not free. From free services, valid certificates supported by all browsers are provided by the StartSSL service. In the middle of 2015, with the support of Mozilla, Cisco and other respected organizations, distribution of free certificates will be organized automatically.

In the meantime, you can use another service provided by the Chinese provider WoSign. They provide two-year certificates, each of which can contain up to 100 domains. Although their website is in Chinese, it’s not so difficult to understand it with an automatic translator.

You need to register at login.wosign.com/reg.html , and confirm your email.

Then go to buy.wosign.com/DVSSL.html and add a free certificate to your cart. You must select certificates that use SHA2.
')
Then on the buy.wosign.com/memberuser/OrderList.html page , click Play and enter the domain names you need.

In the "name" is required to enter the Chinese characters. To create them, you can use the service www.chinese-tools.com/names

After you need to create a key on the server:

openssl req -out mydomain.com.csr -new -sha256 -newkey rsa:2048 -nodes -keyout mydomain.com.key 

and post it in the form on the site.

After that you will receive an email with a link to the archive containing the certificate.

On the server, you will need to configure OCSP stapling so that certificate authorization requests are not redirected every time you connect to your site in China.