You do realize that you can use self signed certificates for local.example.com, do you?
local.example.com