Ssl for fake tld

i have a intranet domain with fake tld (www.myinternaldomain.local)

How i can generate a certificate using letsencrypt?


Hello @linuxadm,

Sorry but you can’t. Let’s Encrypt doesn’t issue certificates for Top Level Domains that are not registered in IANA’s Root Zone Database.


If you’re using it locally, you could create your own Certificate Authority (CA), install its certificate on the clients, and issue your certificates. That’s even better than using Let’s Encrypt.

If you allow guest clients (who will not have/want your CA installed), you should probably use a real domain anyway. You could make the DNS server return a local address for it when the query comes from your intranet.