SSL Cert (SBS Instant?) Best way

[CTHOSTING]

Hello
Having recently bought the Semi(linux)(cpanel) package and been very impress with performance and support, now looking at the SSL options

The main thing it is required for , is myself and some of my customers have there own logo that comes up in the paypal payment screen for online ordering
At the moment it comes up with the insecure items as well warning, which is the logo as it only on http://

Looking for the best suggestion to be able to get over this issue

My 2 thoughts.

Have another domain on the server with the new IP address say cthost-secure.co.uk for example, then that will be fine for all my stuff( I beleive )
But obviously my customers won't as I beleive the cthost-secure.co.uk/~username would not work as that domain would have a different IP to all there accounts
As I beleive you all know you can use ANYDOMAINONSERVER.COM/~username to get to all the accounts, but I would imagine this is only as they are all on the same IP

If I had the certificate put on the main name, or would it be the host name
semided.co.uk or host.semided.co.uk

Would the new IP that comes with the cert have to be used, and would this get rid of the insecure problem
If customers or me then used semided.co.uk/~username or host.semided.co.uk/~username

If they or I wanted major SSL then i would say cert each etc, but simply for hosting images on paypal etc i was hopeing to get away with one

Sorry to ramble on

Thanks in advance
Chris

[eukSam]

Hello,

If a private SSL is installed on any one domain (surely that domain will have a dedicated ip), this SSL can be converted in shared SSL on server so it can be accessed as https://cthost-secure.co.uk/~username/. But this was it will give you a warning the the SSL certificate is not authenticated because it belongs to 'cthost-secure.co.uk'.

If you want to install the SSL on the hostname of the server then there is no need of a dedicated ipaddress as the hostname always points to the main primary ipaddress of the ser ver. Generally a self-signed certificate is installed on hostname.


Though the domain is assigned with dedicated ipaddress for private SSL, you will get warnings about the insecure contents & https://cthost-secure.co.uk/~username/ will always give you popup & warning.


So its always better to use separate SSL certificate for each domain instead of using https://cthost-secure.co.uk/~username/.



Regards,
Sam