You can't generate a SSL certificate for an IP, you always need to use a domain name to generate it. In your case, the script the contractor uses will need to be updated with the domain name of your site so it doesn't return security-related errors when accessing your site.
Note: If the script is only used to access the instance using a SSH connection and doesn't perform any query to the web site, it won't be needed to be modified.
Happy to help!
Was my answer helpful? Click on