I have a web app set up that needs the following SSL encryption:

secure.myapp.com -> SSL
www.myapp.com/login -> SSL
www.myapp.com/signup -> SSL

If I'm correct, I could run one SSL certificate for my whole www.myapp.com/* pages. The problem is that I have a subdomain called secure.myapp.com that either needs to be on a separate IP address to work with SSL.

Right now I have one server, one public IP and a number of Virtual Hosts in apache to make this work.

I'd rather not buy an expensive Wildcard SSL certificate to secure just one subdomain. What is your advice on this? If it IS the only solution any tips on getting a price worthy wildcard SSL cert is appreciated.

I have read about SNI that allows the use of multiple SSL certs, but not all browsers (IE6!) support this. Since we are building a web app for the public, we cannot have IE6 to run on unencrypted connections.

Thanks for you help