I need assistance with creating a certificate for internal use within our organization. We have a private DNS domain named uds.local, and an A record configured as test.uds.local. Could you please advise on the process for creating a certificate for this domain using a private Certificate Authority?
We generally focus on helping people get and use Let's Encrypt certificates.
Still, some other volunteers may offer details about managing a private CA.
I have seen people mention mkcert and smallstep. Just refer to their respective sites for assistance.
mkcert is mentioned here: Certificates for localhost - Let's Encrypt
Smallstep can be a near-drop-in replacement for Let's Encrypt, as it can issue certs via an ACME endpoint.
You can also use Hashicorp Vault as an internal ACME CA. The trick with an internal CA is to distribute your root to trust stores on machines/client software that need it, so that the certificates you issue are trusted by those clients.
There are also established internal CA features in things like Windows (Active Directory Certificate Services), but they tend not to use ACME.