Is it possible to get Let's Encrypt certificate for private DNS records?

Help
1

Is it possible to get Let's Encrypt certificate for private DNS records ?

2

Welcome to the Let's Encrypt Community.

It depends on what you mean by

If you mean valid domains that can be resolved by your public authoritative nameservers that are in use on a private network, the answer is yes with caveats. If you have a publicly accessible web server (or can map the same ports to host with a stand-alone ACME clientlistening), you could use HTTP-01, TLS-ALPN-01, or DNS-01 challenges. Otherwise DNS-01 is your only option. Note that the FQDNs in your certificates are publicly available in certificate transparency logs. You can use wildcard certificates to minimize that exposure.

4 Likes
3

And if your "private DNS record" is not in the public DNS (e.g. foo.bar.local) then no.

3 Likes