I have website e.g. https://mysite.com. I want to connect third-party service to domain https://catalog.mysite.com. This service asked to give them ssl-certificate (.crt + private_key), created on my server, so they could install it on their server.
As I understood, I'll do the following:
- create key, csr; approve that I'm the domain owner and fetch certificate from issuer;
- give the .key and .crt to the third-party service (not copy, but erase from my server and give files to the service).
- point catalog.mysite.com to service's ip.
Looks like simple procedure, but will it somehow compromise my server or mysite.com domain security?