We're setting up a payment service -- a few pages to collect credit cards, and do other stuff that needs to be secure. We would like to offer the service to customers via a cobranded page we serve that appears to be on their site using a
CNAME alias from their domain to our domain. The customer doesn't have an SSL certificate. Example:
http://www.customer.comand other pages, like
- Customer wants to use our service to accept payments
- Our domain has a wildcard SSL cert, www.customer.com doesn't have a cert.
- Customer sets up CNAME DNS record like
payment.customer.comthat is an alias for one of our subdomains, like
- Customer links to our pages via their alias. Credit card info is collected on
So the question: can we set up our SSL cert for
customer.mycompany.com such that it is acceptable if the request originates from
payment.customer.com (and for multiple other customers)? Browser error messages are not OK.