Re:Let's Encrypt Overview
by bkeroack on Friday June 12, 2015 @03:43PM
(#9708111)
As icebraining wrote, it's technically possible with X.509, but nobody within the public CA industry will do it for business reasons.
You could approach the problem by creating your own root CA for the domain and then issue subordinate CA certs, but obviously for clients to validate them they would need to import your root into their trusted store (in a corporate IT scenario you would push out the root as part of the domain policy).
You could approach the problem by creating your own root CA for the domain and then issue subordinate CA certs, but obviously for clients to validate them they would need to import your root into their trusted store (in a corporate IT scenario you would push out the root as part of the domain policy).