30 minutes, comodo reseller, seriously; You won't get SHA256, but you won't be asking your users to hurt themselves.