to ALL: so, before I am going to make a new self-signed #certificate, what other options do people recommend? some restrictions by me: 1. which doesn't #cost me (now and later when something like heartbleed happens) 2. it should be at same time also for my #subdomains working (like a wildcard does)