Did I get it right:
| Site 1 | Site 2 |
|---|---|
| CA1 creates private key1 and CSR1 | CA2 creates private key2 and CSR2 |
| CA1 root certificate1a = CSR1 self-signed with private key1 | CA2 root certificate2a = CSR2 self-signed with CA2 private key |
| CA1 root certificate1b = CSR1 signed with CA2 root certificate2a | CA2 root certificate2b = CSR2 signed with CA1 root certificate1a |
| Users CSRs are signed with CA1 root certificate 1b | Users CSRs are signed with CA2 root certificate 2b |
Christian
