{"id":1557,"date":"2015-03-01T11:05:48","date_gmt":"2015-03-01T03:05:48","guid":{"rendered":"http:\/\/wx.wosign.com\/?p=1557"},"modified":"2015-03-01T11:06:35","modified_gmt":"2015-03-01T03:06:35","slug":"%e5%be%b7%e5%9b%bd%e7%bd%91%e5%8f%8b%e5%80%be%e5%bf%83%e6%8e%a8%e8%8d%90-wosign-free-2y-multi-domain-ssl-certificate-sanucc","status":"publish","type":"post","link":"https:\/\/wx.wosign.com\/?p=1557","title":{"rendered":"\u5fb7\u56fd\u7f51\u53cb\u503e\u5fc3\u63a8\u8350 WoSign: Free 2y multi-domain SSL certificate (SAN\/UCC)"},"content":{"rendered":"

WoSign: Free 2y multi-domain SSL certificate (SAN\/UCC)<\/a><\/h1>\n

2015-02-01 Update 2015-02-12: New SHA2 intermediate cert and application form in English<\/strong><\/span>Chinese CA WoSign issues free multi-domain SSL certificates valid for 2 years.<\/p>\n

Free SSL certificates? – That’s old news…<\/h2>\n

Since many years we have the great free StartSSL<\/a> certificates. They are valid for one year and include both the domain and the www<\/strong> subdomain.
\nSince October 2014 another free option for enabling HTTPS on your website is CloudFlare<\/a>, where you don’t get the key yourself but use their free CDN to terminate SSL connections.
\nStarting in mid 2015 we will have Let’s Encrypt<\/a>, a free certificate authority issuing certificates automatically via a script on the webserver.
\nThere is CaCert<\/a> as well, but since they never passed an audit and they are not included in any important certificate store by default they are unfortunately not an option.<\/p>\n

New player: Chinese WoSign<\/h2>\n

So now there is another option: The Chinese CA WoSign offers free SSL certificates which are valid for 2 years and may contain up to 100 domains each (multi-domain\/SAN\/UCC) which is very useful to host various domains on one single IP address (Better option than SNI<\/a> if you still have Windows XP clients). Before you stop reading because you don’t trust a Chinese company for your website encryption please keep in mind that you don’t have to trust them at all! You generate the SSL key on your server and only send them the CSR (certificate signing request) which doesn’t contain any private information.<\/p>\n

How to get the certificate<\/h2>\n

As of February 10, the order process is finally available in English as well, so no quirky Chinese-to-English translation necessary anymore.<\/p>\n