Using a proper domain and real certificates is literally the right thing to do. It prevents anyone squatting on your domain and breaking internal shit.