Honestly first time where I hear that you could generate certificate in this way for local domains I will check, but honestly confused heavily Are you sure are you talking about certificate for local devices like 'lan', 'private' gTLD? Or you are about honest chain from your board to some domain with you own?