We run an ecommerce platform like Shopify.
We want to offer free SSL certificate to all our customer in a progressive way (~700 shops/domain name on the same IP address)
Is it best to generate one certificate per store, or to add domain names on the same (up to 100 i’ve read) using SAN.
On one hand, 7 certificates with 100 different domains on it is simpler to renew and on the other hand it’s easier to find which certificate belongs to the certificate.
Is Email validation required to generate the certificate but not required when adding a domain using SAN ? Or will we have to send 700 validation emails ?