SSL secured website pulling content from third party web service - we need to use SSL on both

Lets say we have an SSL secured domain - https://xyz.com and we are pulling content from a third party service. They are set up on service.xyz.com (unsecured)

As a result the page is an issue due to PII concerns.

Obviously, the two urls are on completely different IP addresses. I'm new at working with SSL and not quite sure how to approach this. Should we use two certificates here or is it possible to configu开发者_如何学编程re one cert to encompass both IPs?

---

You can either buy two certificates or get one with multiple domains included in the validation. The latter are called SAN (or subjectAlternativeName) certificates. You can buy these certificates from many CAs.

Given that you state that service.xyz.com is a third party service (...that you control the webserver for?), it would generally be considered best practice to obtain two certificates for the two sites, rather than having one certificate (with a single private key).