This question(s) might sound naive to many of you, but I'm more of a developer than a sysadmin, so it'd be extremely useful to have some advice before digging in.
Let's say I own the
foobar.com domain for my public sites and need to generate a Let's Encrypt certificate for my internal servers too:
Can I use the
Otherwise, does it need to be a real second level domain, like
baz.com, or can I use a subdomain of my actual domain, like
If I'm not mistaken, I should somehow instruct my main DNS server to handle
foobar.com, and set up another DNS server to handle
intranet.foobar.com, is it correct?
While I'm the owner of
foobar.com, that's currently used only for the public sites; the whole "intranet" runs under
foobar.local. I've read that since a couple of years that way is deprecated. Should I change
intranet.foobar.comin the main DNS server to make the Let's Encrypt thing work, or it's only a suggestion? Everything is based on that (Active Directory, etc) so I guess it's not an easy migration, right?
Thank you in advance