Method to add a real certificate when you don't want your HA instance exposed to the internet?

That is what i use now, but i had to resolve some other issues with my own apache server and hairpin nat before i could make the switch…
It also didn’t have a high priority, as w10 is running anyway…