Does IT Management Suite support third-party SSL/TLS certificates for .local (internal) domains?
IT Management Suite (ITMS) All Versions 8.6.x & 8.7.x
"On November 22, 2011, the CA/Browser Forum adopted “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Certificates, Version 1.0” (hereafter referred to as the “BR 1.0”) to take effect on July 1, 2012. As part of these requirements, Section 9.2.1 indicates:
"As of the Effective Date of these Requirements, prior to the issuance of a Certificate with a Subject Alternative Name (SAN) extension or Subject Common Name field containing a Reserved IP Address or Internal Server Name, the CA SHALL notify the Applicant that the use of such Certificates has been deprecated by the CA / Browser Forum and that the practice will be eliminated by October 2016.
"Also as of the Effective Date, the CA SHALL NOT issue a certificate with an Expiry Date later than 1 November 2015 with a SAN or Subject Common Name field containing a Reserved IP Address or Internal Server Name.
"Effective 1 October 2016, CAs SHALL revoke all unexpired Certificates whose SAN or Subject Common Name field contains a Reserved IP Address or Internal Server Name."
Source: https://cabforum.org/wp-content/uploads/Guidance-Deprecated-Internal-Names.pdf
What is an Internal Name?
"An internal name is a domain or IP address that is part of a private network. Common examples of internal names are:
ITMS does not support third-party SSL/TLS Certificates for .local (internal) domains.
You should migrate to registered public domain names.
Workarounds