2 ms·

Yes. If you want to create certificates for a private server you have to use a different mechanism, such as dns-01.