Does Let's Encrypt offer a service similar to GlobalSign IntranetSSL for non-public domains? - jss Ref: https://www.globalsign.com/en/ssl/intranetssl

No, Let's Encrypt only provides publicly trusted certificates.

Moving this from Help to Feature Requests. Can Let's Encrypt offer a service similar to GlobalSign IntranetSSL for non-public domains? - jss

the certificates are issued using GlobalSign non-public CAs In order for IntranetSSL certificates to be trusted by browsers or server-to-server communications, the root(s) will need to be pushed out via GPO or related enterprise tools so clients will not receive warning messages. They're talki…

I was going to post the link I've probably posted dozens of times to the Raspberry Pi-based local CA, but I see it's already in that other thread. It continues to work well for me.

:+1: For private domains (intranet) I use step-ca + trefik (to offer HTTPS revers proxy) since a couple of years at several customers and this solution work very well!

A good solution for internal use is: [image] How to Create Your Own SSL Certificate Authority for Local HTTPS Development Learn how to set up your own SSL Certificate Authority for local HTTPS web development. Est. reading time: 16 minutes Just use…

[image] johmor52: Just use 4096 instead of 2048 Why? Also, the guide you've linked to requires a lot of manual steps (although there is a script mentioned at the bottom). If I require a"local" certificate, I too use manual commands, but for larger operations I'd recommend using a specific to…

If you want to learn, fine. If you just need your private CA easily, just use minica or picoca Also, as @Osiris noticed, if you don't like RSA 2048 bit it's probably more useful to go with elliptic curves (P-256 or P-384)

[image] Giuseppe C.: Also, as @Osiris noticed, if you don't like RSA 2048 bit it's probably more useful to go with elliptic curves (P-256 or P-384) For local small size environments it probably really doesn't matter much at all.. So I'm interested to hear why using a 4096 bit key would be rec…

Indeed, CPU cycles are more important anyway in those environments. P-256 should be faster than RSA 2048 on most modern processors. I mean, this is on my phone: ~ $ openssl speed rsa2048 rsa4096 ecdsap256 ecdsap384 --- removed stuff --- sign verify sign/s verify/s rsa 2048 bit…

Certificates for non-public domains

Feature Requests

jon.stumpf February 27, 2022, 8:46pm 5

I found this thread in Help which included your recommendation. I will follow this.

Thanks.

- jss

Topic		Replies	Views
Internal domain with internal DNS Help	4	280	March 28, 2026
Completely LOCAL! Help	31	8900	January 3, 2023
Local Domain certs with Let's Encrypt CA Help	13	21660	January 23, 2024
Generate valid CA certificate for reserved TLDs Feature Requests	6	2939	December 11, 2017
How to generate an SSL certificate for a internal-only domain that’s not on the Internet? Help	6	7790	July 19, 2024

Certificates for non-public domains

Related topics