I have a question about creating intermediate certificates with limited
CN's that they can sign for. If I have my own fully-trusted root
certificate, can I create a limited intermediate CA certificate for a
particular subdomain that can sign certificates only for subdomains of that
domain?
For example, can I create a '*.youwant.to' CA cert that can sign
certificates for things like 'www.youwant.to' and 'ftp.youwant.to'? (But not
'www.gate.net' of course.) I would then give that intermediate cert to the
owners of the domain 'youwant.to'.
DS
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
