My cert seems to be invalid when using IE8/XP. I understand this is because AppHarbor uses SNI, which isn't supported by XP. My question is if there's a solution for this other than rejecting these users.
You can purchase IP-based SSL for $100/month, see the AppHarbor SSL and Certificate KB article.