I did specifically say "unless you're trying to do something like dns-01". If you want to issue public certificates for your internal domains, by all means use

I did specifically say "unless you're trying to do something like dns-01". If you want to issue public certificates for your internal domains, by all means use a public name for them.