What is the reason for the error when installing an SSL certificate using win-acme in XAMPP “Name does not end in public suffix”?

Question

xampp

I need to install a let's encrypt SSL certificate to a site on a local server (XAMPP). Do not offer a self-signed certificate or failover to a global server.
Trying to do this with win-acme. I made a .well-known folder in htdocs and connected it in the virtual hosting settings. The test file is visible in control-test.loc/.well-known/acme-challenge/test.txt , as is www.control-test.loc , control.loc , and control-test.loc . Virtual host settings:

<VirtualHost *:80>
  ServerAdmin [email protected]
  DocumentRoot "D:/xampp/htdocs/control"
  ServerName control.loc
  ServerAlias www.control.loc
  Alias /.well-known "D:/xampp/htdocs/.well-known"
  ErrorLog "logs/control.error.log"
  CustomLog "logs/control.access.log" common
    ##SSLEngine on
    ##SSLCertificateFile "conf/ssl.crt/server.crt"
    ##SSLCertificateKeyFile "conf/ssl.key/server.key"
  <Directory "D:/xampp/htdocs/control">
    Require all granted
    AllowOverride All
    Order allow,deny
    Allow from all
  </Directory>
</VirtualHost>

<VirtualHost *:80>
  ServerAdmin [email protected]
  DocumentRoot "D:/xampp/htdocs/control-test"
  ServerName control-test.loc
  ServerAlias www.control-test.loc
  Alias /.well-known "D:/xampp/htdocs/.well-knownn"
  ErrorLog "logs/control.error.log"
  CustomLog "logs/control.access.log" common
    ##SSLEngine on
    ##SSLCertificateFile "conf/ssl.crt/server.crt"
    ##SSLCertificateKeyFile "conf/ssl.key/server.key"
  <Directory "D:/xampp/htdocs/control-test">
    Require all granted
    AllowOverride All
    Order allow,deny
    Allow from all
  </Directory>
</VirtualHost>

And below, in fact, work in win-acme. The error hangs for a fraction of a second and closes the window: I had to write a video from the screen.

Tell me what am I doing wrong?

Answer 1

Let's encrypt will never issue a certificate for .loc, and let's encrypt connects to a domain and checks for .well-known, since there is no such domain, it will not be able to check .well-known. Option one, this is through dns, but you will also need a domain.