Oh, I thought you had a StartSSL wildcard.  Those require identity
verification of sending them at least two different government-issued
photo IDs, and has involved extra hoops for some people.