Why can't I use a public SSL certificate for internal servers ?

Public certificate providers generally cannot issue certificates for:

• Private IP addresses

• Internal server names

• localhost

• Air-gapped systems

The CA/Browser Forum prohibited publicly-trusted Certificate Authorities (CAs) from issuing certificates containing reserved IP addresses or internal server names, effective November 1, 2015,

The original mandate detailing this phase-out is available in the CA/Browser Forum Guidance on Deprecated Internal Names PDF. https://cabforum.org/uploads/Guidance-Deprecated-Internal-Names.pdf

SecureNT is specifically designed for these internal environments.