I am the CTO for a new Startup SAAS that will be handling financial information. We are considering purchasing a EV SSL, but our application is planned to run on a sub domain like app.ourdomain.com. It seems like many EV SSL certs seem to indicate they only cover the Top Level domain of www.our-domain.com or our-domain.com, so as such would provide no benefit for actual the application (customer dashboard) on the "app." subdomain.
We would like to use the app subdomain because of the freedom to have the application running on a different physical or virtual server, but it is actually this server that would be handling the actual financial service. Am I missing something on applying a EV SSL to the sub-domain? I see in this thread that the accepted answer indicates a EV can apply to subdomain Subdomains on a multidomain EV SSL. However this is not how most EV certificate descriptions actually read. What is the best way to handle a SSLs for a domain structure like ours?