???????????????????????????????????????????which includes the “Server Authentication” EKU. It might be possibly issued by a public CA or by a adequately configured inner CA (appropriately configured, which isn't going to leak information to the web in the certificates it issues). As an alternative to choosing a specialty grocer that carries by