> > 1. How can I revoke an intermediate CA? Is It Possible?
Yes it is possible. Just have the parent CA issue a CRL that includes
the intermediate.
> > 2. Is there a list/index of all the sub-CAs signed by a root CA?
No. Not unless the CA makes a special effort to do this, such as by
publishing everything in a directory.
/r$
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]