diff --git a/local-instance.md b/local-instance.md
index cf761f97..31a72a63 100644
--- a/local-instance.md
+++ b/local-instance.md
@@ -14,3 +14,6 @@ You can alternatively use the ACME DNS-challenge to get a valid certificate for
 
 ## 3. Use Cloudflare
 If you do not have any contol over the network, you may think about using Cloudflare Argo Tunnel to get a valid certificate for your Nextcloud. However it will be opened to the public internet then. See https://github.com/nextcloud/all-in-one#how-to-run-nextcloud-behind-a-cloudflare-argo-tunnel how to set this up.
+
+## 4. Buy a certificate and use that
+If none of the above ways work for you, you may simply buy a certificate from an issuer for your domain. You then download the certificate onto your server, configure AIO in [reverse proxy mode](./reverse-proxy.md) and use the certificate for your domain in your reverse proxy.