I've been using a self-certificate with it's name being the IP address of Port 1 (my LAN). And in Admin and User Settings, I specify this certificate and set it to Use the IP Address of the First Internal Interface, which works. (Though I think because…