[blackfawn]

Does DNS mode work to issue for internal servers that don't expose 80/443 to the internet?

[vbezhenar]

That's one the main reasons to use it, another being wildcard certificate.

[radiowave]

Yes.