Comment by normaler

I bought an extra domain for our internal network.

$COMPANY_SHORT_FORM.network

Works really well and wie no longer have the issue of deploying root certs in devices.