Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

We have the domain:

 www.scirra.com

Which we are going through the process of obtaining an EV SSL certificate for. The site makes use of our static domain to server CSS/images etc. It has 4 subdomains:

static1.scirra.net
static2.scirra.net
static3.scirra.net
static4.scirra.net

To stop security warnings when loading static resources from https://www.scirra.com I'm guessing we need an SSL certificate for the static server.

  1. I'm guessing the .net certificate doesn't need to be EV
  2. I'm assuming the .net certificate doesn't have to be the same provider?

Amateur question I know but just want to check before we spend money on a cheap wildcard certificate for the static server.

share|improve this question
add comment

2 Answers

up vote 3 down vote accepted

Yes you need a certificate to stop warnings (though different browsers have different sorts of warnings, some are almost unnoticeable).

  1. Yes, it doesn't need to be EV - see What are the benefits of a more expensive SSL certificate?
  2. Yes, it doesn't matter.
share|improve this answer
add comment

You are correct on both counts. The .net certificate doesn't have to be an EV certificate, and doesn't have to be from the same provider.

Paypal does exactly what you want to do.

  1. https://www.paypal.com/ has an EV certificate from Verisign
  2. Static content is loaded from https://www.paypalobjects.com/, which is signed by Akamai and isn't an EV certificate.
share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.