I would like to secure my billing system and was thinking of having it at client.domain.com. I understand this would need a dedicated IP and a certificate installed.
I would also like to give my clients access to a secure cPanel so I could use cpanel.domain.com:2083
The certificates I am looking at are the domain certs Rapid SSL and Positive SSL
I have 3 questions:
Which SSL cert to go for?
Is it better practice to use a sub domain for the clients billing system or just use a directory?
Is shared certificate possible if so, can I use the same certificate for shared cPanel access?
I hope that all makes sense. Any pointers would be appreciated.
Great questions. I would first like to point out that we provide the Cpanel installation, and that it is already secured by our shared SSL certificate, so you would not need to do that part.
Go answer your other questions, though:
The choice of SSL certificate is really up to you. We provide a PositiveSSL for purchase that would work normally for you. That being said, if you purchase a RapidSSL certificate we can certainly install that one for you, as well.
The difference between a subdomain and a directory for this really comes down to a few decisions. To answer this properly, I’ll have to explain how SSL certificates work, and what they cover. Please bear with me 🙂
An SSL certificate covers a very specific domain. A certificate issued for http://www.domain.com will return an error when a visitor accesses https://domain.com (without the www.) – from the server’s point of view, the two are different. As well, certificates are installed to IP addresses, meaning you will need to have a dedicated IP address on the main domain (this carries over to subdomains, as well). If you have multiple sections that will need to be covered, you will need to purchase a certificate for the main domain, and use folders. Or purchase a wildcard certificate, which covers *.domain.com (basically, all subdomains).
Finally, the shared certificate is installed, and is used by default when your customers access their Cpanel interface. You can use this for your billing areas as well, if you like – please note that it changes the URL, as described in http://kb.site5.com/ssl-2/ssl-certificates-vs-shared-ssl-certificates/