I was wondering, is it possible to get an SSL cert for a shared ip in IIS or do I have to assign a dedicated IP?

Here are my scenerios:

1) IIS ip is 192.168.1.10 site name: test.xyz.com
I add a new site with a header of zebra.xyz.com with it's own subdirectory on the server, etc.
Now I want to get an SSL cert for zebra.xyz.com, will this work?

OR:
2) IIS ip is 192.168.1.10 & 192.168.1.11
192.168.1.10 is assigned to test.xyz.com
192.168.1.11 is assigned to zebra.xyz.com (with it's own subdir, etc.)
Can I get an SSL cert for zebra.xyz.com in this configuration?

Note: Of course the server is behind a NAT, I am not sure if the IP follows the cert or not, if I change the IP will I have to change the cert?
At a later time, IF I wanted to get a cert for test.xyz.com would I be able to get it one as well? (and have it co-exist with zebra on the same server?)

Thanks in advanced,
-Tony