> This is commonly how corporate and institutional systems are set up, it's a terrible idea but it's very common.

Tbh makes it kinda sense for those systems, when used only with internal tools and on company devices... but yeah I’d just (of course) Let’s Encrypt if I was setting it up for a client.