[cpach]

A public CA won’t give you a cert for 10.0.0.1

[alibarber]

Exactly - no one can prove they own it (on purpose because it's reserved for private network use, so no one can own it)