I use .network for my internal network with a proper FQDN. This allows me to get certs for internal services that validate in all browsers.