Is it possible to buy an intermediate certificate to use it to sign subdomain certificates? It has to be recognised by browsers and I can't use a wildcard certificate.
The search turned up nothing so far. Is anyone issuing such certificates?
Intermediate SSL Certificate – How to Obtain
ssl
Related Topic
- Ssl – Site down after renewing Intermediate SSL Pro Certificate (Verisign)
- Ubuntu – HAProxy and Intermediate SSL Certificate Issue
- Ssl – Dovecot SSL Certificate is not accepted
- Nginx – client SSL certificate verify error: (27:certificate not trusted)
- Ssl – Two Way SSL Error – 400 The SSL certificate error just for client certificate
Best Answer
The problem is, that the currently used infrastructure and implementation does not support intermediate certificates which are limited to only some (sub)domains. This, in effect, means that you can use any intermediate certificate to sign any certificate you want and the browsers will trust it, even if this would be certificates for domains you don't own.
Thus, such intermediate certificates are only given to really trustworthy organizations, whatever this means (but lots of money is probably involved).