For internal names, you need to end it in .local, not .lcl. Or you can choose from the following:
.test
.example
.invalid
.localhost
.local
.lan
.priv
.localdomain
see https://support.ssl.com/Knowledgebase/Article/View/34/0/acceptable-internal-domain-names