SSL

Options

Read the product offerings here to get acquainted with what's available. NOTE: All three options result in valid SSL certs accepted by Java and your browser without the "This Cert Is Invalid" message you get for self-signed certs.

Products: https://www.startssl.com/?app=39

• If you're securing a single site, use the free offering (can generate certs for a domain like apps.isajohnson.com).
• If you have multiple names for a single site, you probably want wildcards. These are only available on the class-2 tier. (*.isajohnson.com)
• If you're working with financial transactions, you want EV (Extended Validation). This gives the green bar you see for things like your banking website and amazon payments.

My Choice

I use StartSSL, class 2 ($60 for a full year of unlimited cert & wildcard cert generation where each generated cert is valid for up to 3 years.)

See the following page for CSR generation: CloudFront - SSL for Custom Domains