Free SSL certificates for 2 years with support for up to 100 domains

Original author: Freerk Ohling
  • Transfer
The Internet, in the wake of universal wiretapping and the associated paranoia, is gradually moving to total SSL. Unfortunately, while this is not very simple and usually not free. Of the free services, valid certificates supported by all browsers are provided by the StartSSL service. In mid-2015, with the support of Mozilla, Cisco and other reputable organizations, the distribution of free certificates will be organized automatically.

In the meantime, you can use another service provided by the Chinese provider WoSign. They provide two-year certificates, each of which can contain up to 100 domains. Although their site is in Chinese, using an automatic translator to understand it is not so difficult.

You must register at login.wosign.com/reg.html, and confirm your email.

Then go to buy.wosign.com/DVSSL.html and add a free certificate to the basket. You must select certificates that use SHA2.

Then on the page buy.wosign.com/memberuser/OrderList.html click Play and enter the domain names you need.

In the field "name" is required to enter Chinese characters. To create them, you can use the service www.chinese-tools.com/names

After you need to create a key on the server:

openssl req -out mydomain.com.csr -new -sha256 -newkey rsa:2048 -nodes -keyout mydomain.com.key

and post it in the form on the site.

After that, you will receive an email with a link to the archive containing the certificate.

On the server, you will need to configure OCSP stapling so that certificate authorization requests are not redirected each time you connect to your site in China.

Also popular now: