We are a non profit and have been hosting an online site that accepts payments. It has been getting enough exposure now that we want to put an EV SSL certificate on the site. The question I have is does it make sense to put a cheap $10 cert on www.domain.com and redirect it to https://domain.com with the super fancy EV cert? unfortunately our marketing team has mixed www and non www in many forms so we need both to at least present an SSL. We wanted to purchase one from Digicert but they do not cover the alternative name.
I figured this would work but is there something I am missing and is this a common practice? Thanks!