November 2015
SSL for Internal / Local Hostnames
A recent change to the CA/B Forum Baseline Requirement now prevents issuance of SSL certificates containing local hostnames.
From 1st November 2015, all Common Names and SANs fields must contain FQDNs
If your server uses names such as "company.local", you will need to replace these with FQDNs such as "local.company.example.com"
Of course, there is no requirement to add these local FQDNs to your public DNS, they may reside in your local (private) DNS only, thus maintaining the same internal-only restrictions for which "company.local" provided.
From 1st November 2015, all Common Names and SANs fields must contain FQDNs
If your server uses names such as "company.local", you will need to replace these with FQDNs such as "local.company.example.com"
Of course, there is no requirement to add these local FQDNs to your public DNS, they may reside in your local (private) DNS only, thus maintaining the same internal-only restrictions for which "company.local" provided.