# Need to secure my internal website **URL:** \ **Category:** Help\ **Created:** [April 29, 2024, 8:46pm UTC](https://community.letsencrypt.org/t/need-to-secure-my-internal-website/217424 "2024-04-29T20:46:35Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![daniel.segura](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/daniel.segura/32/79503_2.png) [@daniel.segura](https://community.letsencrypt.org/u/daniel.segura)\ **Post date:** [April 29, 2024, 8:46pm UTC](https://community.letsencrypt.org/t/need-to-secure-my-internal-website/217424/1 "2024-04-29T20:46:35Z")
Hi I have an internat website that only my internal user reach it. I mean that site is not public. My users have to access it using the URLS: [https://sgc.domain.com](https://sgc.domain.com) [https://docs.domain.com](https://docs.domain.com) [https://123.domain.com](https://123.domain.com) We are having an issue related with our computers browsers, when the users open those links, it says that website is not secure, but the biggest problem we are facing is that when they need to download a PDF file from there, it is blocked by the browser, and we have to go and clic on download anyway no matter if it is not secure. Of course is secure because the website is hosted in an internal server, but the Microsoft Edge does not trust on it. How can I install a certificate and let it work for at least 1 year or more if this certificate is issued with LetsEncript? ---
**Author:** ![Bruce5051](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/bruce5051/32/76576_2.png) [@Bruce5051](https://community.letsencrypt.org/u/Bruce5051)\ **Post date:** [April 29, 2024, 8:54pm UTC](https://community.letsencrypt.org/t/need-to-secure-my-internal-website/217424/2 "2024-04-29T20:54:54Z")
Hello @daniel.segura, welcome to the Let's Encrypt community. 🙂 > **[Certificates for localhost - Let's Encrypt](https://letsencrypt.org/docs/certificates-for-localhost/)** > > Sometimes people want to get a certificate for the hostname “localhost”, either for use in local development, or for distribution with a native application that needs to communicate with a web application. Let’s Encrypt can’t... and > [@Local Domain certs with Let's Encrypt CA](https://community.letsencrypt.org/t/local-domain-certs-with-lets-encrypt-ca/212014/9): > > T… ---
**Author:** ![daniel.segura](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/daniel.segura/32/79503_2.png) [@daniel.segura](https://community.letsencrypt.org/u/daniel.segura)\ **Post date:** [April 29, 2024, 9:01pm UTC](https://community.letsencrypt.org/t/need-to-secure-my-internal-website/217424/3 "2024-04-29T21:01:32Z")
Hi @Bruce5051, in that case what can be the solution to implement and resolve this situation, I have asked to use a SSL certificate but it has to be FQDN or published throug a Public IP address, also I have seen that I should purchase a Code Signin Certificate but is very expensive. One of my last resources was try to use a lets encrypt certificate, but you say that is not possible. Thanks in advance. ---
**Author:** ![Bruce5051](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/bruce5051/32/76576_2.png) [@Bruce5051](https://community.letsencrypt.org/u/Bruce5051)\ **Post date:** [April 29, 2024, 9:07pm UTC](https://community.letsencrypt.org/t/need-to-secure-my-internal-website/217424/4 "2024-04-29T21:07:09Z")
[Let’s Encrypt](https://letsencrypt.org/) offers [Domain Validation (DV) certificates](https://letsencrypt.org/docs/faq/#what-services-does-let-s-encrypt-offer). > [@daniel.segura](#): > > seen that I should purchase a Code Signin Certificate [Does Let’s Encrypt issue certificates for anything other than SSL/TLS for websites?](https://letsencrypt.org/docs/faq/#does-let-s-encrypt-issue-certificates-for-anything-other-than-ssl-tls-for-websites) "Let’s Encrypt certificates are standard Domain Validation certificates, so you can use them for any server that uses a domain name, like web servers, mail servers, FTP servers, and many more. Email encryption and **code signing require a different type of certificate** that Let’s Encrypt does not issue." > [@daniel.segura](#): > > in that case what can be the solution to implement and resolve this situation, I have asked to use a SSL certificate but it has to be FQDN or published throug a Public IP address There is the [DNS-01 challenge](https://letsencrypt.org/docs/challenge-types/#dns-01-challenge) of the [Challenge Types - Let's Encrypt](https://letsencrypt.org/docs/challenge-types/) that might work well for you. And here is a list of [DNS providers who easily integrate with Let's Encrypt DNS validation](https://community.letsencrypt.org/t/dns-providers-who-easily-integrate-with-lets-encrypt-dns-validation/86438) ---
**Author:** ![daniel.segura](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/daniel.segura/32/79503_2.png) [@daniel.segura](https://community.letsencrypt.org/u/daniel.segura)\ **Post date:** [April 29, 2024, 9:38pm UTC](https://community.letsencrypt.org/t/need-to-secure-my-internal-website/217424/5 "2024-04-29T21:38:28Z")
Hi @Bruce5051 for your reply. One more question, based on my needs, should I generate one certificate by every subdomain, I am thinking on that because they are not going to be validated externally to use the TXT record, Am I ok or Am I lost? ---
**Author:** ![Bruce5051](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/bruce5051/32/76576_2.png) [@Bruce5051](https://community.letsencrypt.org/u/Bruce5051)\ **Post date:** [April 29, 2024, 9:41pm UTC](https://community.letsencrypt.org/t/need-to-secure-my-internal-website/217424/6 "2024-04-29T21:41:48Z")
@daniel.segura I personally think using one wildcard (i.e. \*.domain.com) certificate would be find. Do remember certificate life time is 90 day and it is suggest to renew them at 2/3 of their life (i.e. at 60 days). So automating deployment would likely be of value. ---
**Author:** ![daniel.segura](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/daniel.segura/32/79503_2.png) [@daniel.segura](https://community.letsencrypt.org/u/daniel.segura)\ **Post date:** [April 29, 2024, 10:00pm UTC](https://community.letsencrypt.org/t/need-to-secure-my-internal-website/217424/7 "2024-04-29T22:00:31Z")
Hi @Bruce5051 thanks for all your suggestions, now I have more information on how to proceed Best regards ---
**Author:** ![Bruce5051](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/bruce5051/32/76576_2.png) [@Bruce5051](https://community.letsencrypt.org/u/Bruce5051)\ **Post date:** [April 29, 2024, 10:03pm UTC](https://community.letsencrypt.org/t/need-to-secure-my-internal-website/217424/8 "2024-04-29T22:03:32Z")
Have a pleasant day @daniel.segura 🙂 ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [May 29, 2024, 10:04pm UTC](https://community.letsencrypt.org/t/need-to-secure-my-internal-website/217424/9 "2024-05-29T22:04:12Z")
Closed on May 29, 2024, 10:04pm UTC This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.