Technically yes, but no issuer will provide long expiry certificates anymore [1]. They won't be recognised by major browsers even if they do anyway.

Some still sell 2 or 3 year certificates but that's a marketing ploy. You pay the price for the next 3 years in advance but you still have to renew it every year.

[1] https://docs.digicert.com/manage-certificates/end-2-year-pub...