@J12t If you own a domain it’s pretty simple to get real certs from letsencrypt for non-Internet machines using dns-01 authentication. I use “lego” as a client, but most of the decent acme clients support it.