I have the following situation. I have a web application running on IIS written in ASP.NET Core, and I would like to host it over https.This means I need a SSL certificate for IIS but here's the crux of the matter: The app is only to run on a local intranet server that doesnot have access to the internet (fully contained intranet) and it may occur that the server may only be reachable via IP address, and notnecessarily a domain name. Basically, I may need a SSL certificate for IIS that is bound to an IP address.
The reason I want to obtain such a certificate is to primarily do away with the 'Not Secure' icon on browsers running apps over http, and sothat users no longer see the warning page that the certificate is untrusted when running https (previosuly I had the app running with a self-signed certificate).And to be honest, an added layer of security won't hurt and makes the app look more 'professional'.
I should also mention that because there will be numerous of these sites (intranets) and each with numerous users browsing to their respective web app,getting each user to trust a self-signed certificate is something I wanted to avoid, and hence was hoping to obtain a certificate that chrome/edgewould trust out of the gates.
The question now is, where could I otbain such a certificate from a 'trusted certificate authority' bound to an IP address, ideally free of charge?
Much thanks