I am a developer, I have created self-signed certificates before for my work.
This time, I am involved up until going live with the whole app (usually there was someone else in charge of this).
- Is it ok to use self-signed certificates for development, and then use the acquired one for production only?
- Does using self-signed certificates imply that in development, the clients need to add my CA to their list?
- When we go live, using the actual acquired certificate, will there be any change in clients?
I am ok with just links to documentation, I did some search but couldn't find specific answers for the whole workflow.