Hi @zaphodikus
please start with some basics:
If your mycompany.ltd is a worldwide visible, unique domain name, you can create a certificate with the domain name GIBA.dhcp.mycompany.ltd.
But if this is only an internal server without a public ip address, you can't use http validation.
Instead, you must use dns validation.
Read