Intranet SSL Certificates

Companies may need SSL certificates to access their IP addresses for a variety of reasons. Companies use IP addresses for accessing various applications via the intranet or the internet. You will need to secure IP addresses using SSL certificates based on your organization’s strategy.

This article will explain how to obtain an SSL certificate for IP addresses and what type of SSL certificates can be used to protect IP addresses.

Let’s now dive deeper into each subset to find out more.

SSL Certificate for Public IP Address

A public IP address is an IP address that can be accessed via the internet. These are the requirements and guidelines for getting an SSL certificate to publicize your IP address.

1) The ownership of the IP address must be proven by your association. I.e. The IP address must only be relegated by your association and not to the web hosting company.

2) A certificate authority must be able to verify your IP ownership under an IP WHOIS query. The IP WHOIS query should include your association name, address, telephone number, as well as email ID.

Public IP addresses can be used by both Organization Validated Single Domain and Organisation Validated Multi-domain SSL Certificates.

4) If you have chosen a multi-domain SSL, you can create an IP address in either the Common Name (CN) or the Subject Alternative Name (SAN).

Private IP Certificate

An internal IP (or private IP) refers to an IPv4 address or IPv6 address that is saved by the IANA.

• Any IPv4 address within the RFC 1918 range (e.g. 10.0.0.0, 172.16.0.0, 192.168.0.0)
• Any IPv6 address within the RFC4193 range

An SSL certificate cannot be obtained for a private IP address. Trusted CAs cannot issue a private SSL certificate for an IP address. A certificate issued to 192.168.0.1, for example, would be considered substantial in any particular situation and will not be allowed by a global CA. This guide can be viewed on private IP addresses.

An alternative to SSL Certificate for internal IP Address

Prepare for your enterprise CA – however, this comes with the costs of obtaining, designing, and running your CA and OCSP administrations.

Self-signed SSL Certificates are acceptable under certain conditions, such as test servers. Clients are instructed to ignore important program alerts that could cause security problems if they acknowledge certificates from outside their organization.

How to obtain an SSL Certificate for your IP address

You can contact the vendor of your SSL certificate to obtain your certificate. You can also contact a reputable SSL certificate provider to expedite your process for getting SSL for your IP address.

List of SSL Certificates For IP Address

SSL Certificate Restrictions for IP Address

There are specific stipulations that must be considered if you decide that an IP address is necessary for your cert. Most people find it difficult to remember that the IP address must be given to your organization (not your ISP) and not your facilitating supplier. This can be checked using an IP WHOIS query.

Public CAs impose a limit on the use of public CAs.

1. Open IP tends only to (e.g. 18.236.49.115).
2. Private IP addresses (e.g. 10.0.0.0) are not allowed.
3. In an IP WHOIS query, the IP must include your organization’s legal name and location.
4. Only Organization Validated (OV), certificates can be issued. DV and EV certificates cannot be issued.
5. Both single-domain and multi-domain certificates are permitted.
6. The IP field can either be the Common Name (CN), or a Subject Alternative Name(SAN).