Registering for a PG&E Share My Data (SMD) developer account requires a certificate. Not the usual SSL certificate (the kind behind a website's padlock)... PG&E needs a client certificate, which proves who you are when your side connects to theirs.
I bought a Sectigo certificate from Certera. Sectigo issues the certificate; Certera is the reseller.
It's Sectigo's PAC Enterprise (S/MIME) certificate: organization-validated, and it can do client authentication — which PG&E's API requires. The cheaper email-only certificates can't.
The product page is here. The application itself happens on your Certera dashboard, after checkout. I went with the one-year option. (To avoid interruption, upload an updated certificate in your SMD user account at least three weeks before expiration... they can take a while to swap it out.)
Sectigo has to confirm the business's phone number in an independent source it trusts. I used Cylex. It was free and easy. (Oakstead's listing is here.)
Written by Mike and Claude Code