It's even worse than that as even if all the above is actually correct and done perfectly that you may still not get the "green" depending on the browser as the browser makers are moving to showing domain validated (via email) certificates as gray and only EV (extended validation) certs as green.

Things to note: EV certs are much more expensive. You cannot get a cert that is both EV and a Wildcard, single domains only.

Screenshots of how the various browsers show Domain vs EV certs at:

https://www.expeditedssl.com/pages/visual-security-browser-s...