Q:

Do I need to purchase a trusted cert for offline environment?

I have a webserver used self-sign cert which is not connected to internet and those connect to my webserver also have no connection to internet, in such environment, do I need to purchase a trusted cert? It was highlighted in VA scan.
Is internet connection required for browser to verify the trusted cert? Assumed I have purchased ssl cert for my webserver.

A:

If the clients are truly offline, then a commercial cert won't work properly anyway, because the clients will fail when they try to look up the CRL for the cert issuer's CA.
SO no, if the entire environment has no internet connection, than a commercial cert will do you no good. Using manual certificate distribution or an internal CA would be better.

