Certificates for subdomains of LAN IP addresses using embedded asymmetric keys?

A topic on DANE and the upcoming roots: