SAN with a non-standard TLD

[toossivi]

Hi

I have read that letsencrypt support UCC (term used by Microsoft). UCC would allow internal name.So i have a domain example.mydomain.com and i would also have an alternate name with a non-standard TLD non accessible via Internet like example.mydomain.loc. Would letsencrypt let me issue this certificat?
The goal would be to have the padlock when connected via local network as well as public network .

Thanks

[JuergenAuer]

Hi @toossivi

@toossivi

example.mydomain.loc . Would letsencrypt let me issue this certificat?

no, that's not possible. loc isn't a public suffix (like .com, .de, .net, .eu, .us etc.). So the domain name isn't unique.

Read

How It Works - Let's Encrypt

[mnordhoff]

CAs like Let’s Encrypt are no longer allowed to issue certificates for “internal” names.