Quick SSL Certificate Question

[elkdanger]

'allo

We're looking at buying an SSL certificate to handle secure transactions on our dedicated server, but I've just got a couple of questions to clear some things up.

Now, the set up that we have is we have two static IP addresses; one one IP address we host the websites, and the other we're going to host scripts that require secure access. This includes things like returning from payment integration services and so on.

So effectively we have two locations: www.exampledomain.co.uk and secure.exampledomain.co.uk. This is going to sound like a silly question, but I take it I would buy the certificate in the name of secure.exampledomain.co.uk?

 

[elkdanger]

Do you need to buy one, you can create your own you know if the traffic to the server is known to you and they are happy to download your self cert.

Yes we did try that, but problems occured because the punters of one of our e-commerce sites were not willing to sign the certificate half the time. Half of the problem is that the site isn't built very well, but that's a whole different kettle of fish (let's not go there )

We've also got a project coming up that requires a 'proper' certificate which won't produce any prompts to the user.

 

[elkdanger]

To the original question - elkdanger - purchase the SSL cert for the domain which will need the secure access, as SSL certs (except wildcard certs) are valid only for a particular domain+subdomain combo. Short answer - you're right - secure.exampledomain.co.uk

Thanks for clearing that up