[marginalia_nu]

> Same way you can't get a cert for some.name.in-an-internal-domain-we-use-internally

Sure you can, you just have to issue it yourself.