* Kurt Jaeger: > Is this kind of sub-CA a service that some certificate authorities > provide ?
Interesting question. From the perspective of operating a small and unknown-to-the-wider-world Root CA myself, I would never allow a third party to use an Intermediary CA of mine to sign certificates. I could not control how, when and for whom this third party hands out certs -- and all of those would be chain-signed with my Root CA. Not going to happen here. I would be surprised if some Organisation XYZ, which went through the significant effort and cost of establishing a well-known and respected Root CA, handed out intermediate CAs to others. -Ralph _______________________________________________ mailop mailing list -- [email protected] To unsubscribe send an email to [email protected]
