As for the original question, I think that you cannot get a DV certificate for the .onion TLD at the moment. I assume that you could go the FaceBook way and try your luck with Verisign or Digicert, but it's probably going to cost you a few hundred of dollars.
Just for info ordering a .onion certificate in digicert is supported: