title: Self-signed certificate for device with local IP
body: <p>Scenario:</p>
  
  <ul>
  <li>We have a device similar to a WiFi router that has UI and API exposed</li>
  <li>The device will run on any LAN out of our control, just like a WiFi router runs on any house.</li>
  <li>The device doesn't belong to any domain and is accessed through its IP address (i.e. 192.168.1.100) with a browser.</li>
  <li>The protocol <strong>shall be HTTPS</strong></li>
  <li>The software used is .net Core/Kestrel on Windows</li>
  <li>Currently we have warnings in all browsers telling that the device has an invalid certificate.</li>
  <li>Constraint: The device shall be accessible by any machine (desktop/tablet) and cannot install or configure anything in the client machines.</li>
  </ul>
  
  <p>The question is:
  <em>What it the best way to remove the warning? We read that there cannot be regular certificates for private/local IPs.</em></p>
  
  <p>Self-signed certificates seem to work for few days and then the error shows up again.</p>
  
  <p><a href="https://i.stack.imgur.com/8ICQl.png" rel="noreferrer"><img src="https://i.stack.imgur.com/8ICQl.png" alt="Local environment"></a></p>