Acquiring Certificate (idp.crt)

[Thomas Jones]

Hi everyone, 

Quick question about idp.

I'm looking to buy a certificate in order to replace the self-signed certificate (idp.crt) so:

- It's a good practice to buy a certificate from a CA for production right? I mean in order to replace the idp.crt that shibboeth creates for you or the self-sign is good enough? (as a separate topic, I already have the browser-facing ssl certificate)
- I'm a little confuse about what type of certificate should I buy: Certificate for signing code, apps, etc?

I'm lost with this. Any help is much appreciated.

Best,