hmmm ... idk. for LAN-based appliances, which will likely even have invalid names a la

* router.my.home

or

* nas.my.home

or whatever "dummy-tld" + local domain one uses ...

so if i want to use certificates in such an environment, i would create my own CA and import its public cert(s) into my browsers - or OSes - certificate-store.

problem solved!!

and also learned some useful lessons regarding "run your own CA" :)

cheersv