TLS Certificates may be requested directly from ITS for university related domains. Fill out the F0064_A form on TSD's website. Any student, faculty or staff member may request certificates via the form. Also available, but not advertised, are wildcard certificates which may be requested by entering a CSR for
*.yoursub.gmu.edu and specifying your request in the comments field.
TODO: When the stoopid TSD website starts working again, walk through the process.