We own the company.com
domain, and have ssl comodo wildcard on it.
We have set up a private dns range *.intra.company.com
locally on our ADDS Server, unresolvable by the Internet.
I'm wondering whether is possible the install LetsEncrypt certificates on IIS Sites binded with private domain names, without exposing them to the Internet. I've seen a 'hack' to register the domainnames pointing to a publicly available IP and then install the certs. In the local network, point the hostname to the real IP's.
Is this the best way?