My boss refuses to allow private IP addresses into a public DNS definition. So I am unable to put the private SVN box IP (svn.ourcompany.com) into a .com DNS record. It exists only at svn.ourcompany.local
I don't mind this, ultimately, except when it comes to SSL.
Is there a popular (root CA cert pre-installed in all OSes) CA that signs .local certificate requests? It doesn't need to have any bells and whistles, no wild card, it can even cost a nominal fee.
I really don't want to go around and install a self-rolled root CA in every user's computer, and have to redo it when something changes. It's just annoying.