As I said, payment was made via wire transfer, and the email address was free, there are a lot of free sites out there. However, this was only an experiment of sorts. Every cert I have registered, has beed verified, for business reasons. The question remains however,
> Can I do the following? > > Issue an openSSL certificate to another server, from the server where I > installed the expensive Verisign certificate? I want to issue certs off the purchased cert so that I don't have to keep purchasing them. Is this possible, and, Kevin, is this Legal? ----- Original Message ----- From: "Trilli, Kevin" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, February 28, 2002 6:37 PM Subject: RE: OpenSSL Chain Of Trust > Dear Sir: > Would you please send me your certificate info for the certs you state that > we issued you ? > From our records, we have shown that you have passed full (and standard) > authentication procedures and that you did not request the certs using a > free email address, which is against our current policies. > > Thanks > Kevin > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto: > Sent: Thursday, February 28, 2002 2:17 PM > To: [EMAIL PROTECTED] > Subject: OpenSSL Chain Of Trust > > > I'm rather new to the SSL world, but I have a simple issue. I paid big $$$ > to Verisign for a Certificate for my web server. It seems to me that the > only reason I had to pay big $$$ is because Microsoft lists Verisign as a > Trusted CA. Of course, the reason for this is so Verisign can "Identify" > who I am, > which I must say, is not verification. They took my Hotmail Email Address, > and a > Wire Transfer from Western Union. I never had to provide my identity. > > Can I do the following? > > Issue an openSSL certificate to another server, from the server where I > installed the expensive Verisign certificate? > > My hope is that the certificate I issue will establish a chain of trust back > to verisign, thus, users won't get that silly popup window in their browsers > saying the site is dangerous, etc etc. I don't think my certificate is > dangerous just because I have not paid Microsoft massive amounts of money to > consider me a CA. Is their any way to do this? Thanks. > > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]