title: SSL installation for a frontend/api, any idea how to configure it?
body: <p>I'm digging into the SSL installation for my app and it seems that my "basic" questions for the "how to start an ssl config" didn't find a clear answer.</p>
  
  <p>I use a frontend in node that calls an API running on Ruby on Rails.</p>
  
  <p>My front app delivers a multiple subdomain front service. Both (back and front) are hosted on Heroku and DNS points to 1and1 management.</p>
  
  <p>I found some first steps with Geotrust provided by 1and1 and another choice that goes to letsencrypt.</p>
  
  <p>My questions are : </p>
  
  <ol>
  <li>If I had to choose one, which one between the backend and frontend would welcome the certificate ? </li>
  <li>I tried to install a (paid, ofc.) Geotrust certificate on 1and1 but it fails. Is it related to the CNAME 1and1 &lt;-> Heroku complexity, or because I didn't install the key yet on the app (and I don't know how) ?</li>
  <li>If I plan to use SSL on front, I found installation of letsencrypt quite confusing. Between the npm letsencrypt and the "getting started" of the official website, there's a gap. Should I really need the node package ? Or is the certbot quite enough for making it working ?</li>
  </ol>
  
  <p>Lots of informations but clearly not really operational for me. I'm sorry, probably I miss a thing in my readings. </p>