Hi, We're still running WI 5.4, we'll be migrating to Storefront 3.11

Our storefont server FQDN would be

storefront1.abc.def.local
storefont2.abc.def.local

we will be load balancing the 2 storefront servers.

OUR gateway VIP would be mycompany.yourcompany.com , this we have a wildcard for. (available to the outside world)

Not sure what kind of certificates I'd use with this, wondering if SSL Offload would work for us due to the names of the storefront servers.

Certs are obviously not my strong suit, but that will change.

Thanks in advance!

Depends what you want to do excatly. You can use basially any kind of cert public or private