I have a website hosted by Apache on a Linux server. I also have a Node.js back-end/API that is hosted on the same server, which serves all the front-end's requests. Today I set up SSL for the front-end and got an error that a request to the back end was not over SSL and thus blocked.
Now I'm in the process of setting up SSL for my back-end, but I'm wondering something: Do I need a separate certificate for my back-end or is it okay to share it between the two applications?
Thinking about this raised another question: An SSL certificate is issued for a domain name. My back-end is not hosted on any domain, just on my server. Do I need to register it to a sub domain to be able to implement SSL for it?