On: Six day and IP address certificate options in 2025

[TacticalCoder]

Curiosity killed the cat: is it possible to get a valid cert for IPs on private LANs, like for example 192.168.1.42 or 10.0.0.84?

[outworlder → TacticalCoder]

Generally I just get DNS names for those.

It does 'leak' your internal host addresses but that shouldn't be an issue.

[tialaramex → TacticalCoder]

No. The certificates are for a claim that this is your IP, but it's not your IP, it isn't anybody's IP.

Same way you can't get a cert for some.name.in-an-internal-domain-we-use-internally

[marginalia_nu → tialaramex]

> Same way you can't get a cert for some.name.in-an-internal-domain-we-use-internally

Sure you can, you just have to issue it yourself.