You can use SSL to cover an internal domain if it is an officially registered domain (a publically available FQDN). If the internal domain is not a delegated and registered domain, the certificate will not be issued. Related posts: What is the difference between Wildcard and SAN/Multi-Domain functionality? What is a Multi-domain or SAN certificate? How many domains can I secure with a Multi-Domain SSL Certificate? What Is a Fully Qualified Domain Name?