Ssl – Make firefox more accepting of self-signed SSL certs

It depends on what you are asking for exactly. If you want the ability to create and revoke your own certs that are trusted by browsers (that is, from an established CA) then you should look for a provider that gives you managed PKI access. I know that both Thawte and Verisign provide this.

If you want to create certififcates for others to use that are chained to a trusted CA, there are some providers that do this, but it costs a LOT.

If, on the other hand, you want to create certs for your own internal use and want to create your own CA that you import into your browser manually, you can accomplish this using just OpenSSL.

My apologies if I missed some detail that makes this totally wrong (I've got limited time right now, I'll read it all in detail later). Looks like you're trying to issue a cert with multiple wildcards; that's invalid for almost all browsers.