A while ago I encountered a question asking how to setup SSL/TLS on intranets, I gave an answer which basically says "use a public domain and associated certificate and resolve the domain to the Intranet address of the server".
Is there a CA/B rule that prevents CAs from issueing certificates to private domains (e.g. mDNS
*.local, and loopback
localhost) and addresses? What's the general CA/B policy on this?