> I want to issue certs off the purchased cert so that I don't have to keep > purchasing them. Is this possible, and, Kevin, is this Legal?
It is possible; you can use the cert as a CA cert. Is it legal? Probably, it depends on what is in the agreement you have with Verisign. Will it work? No. The cert that Verisign signed is (on purpose!) missing the keyUsage bits and/or other markings that identify it as a CA cert. Nobody will recognize your SSL cert as a cert-signing cert, so they won't accept it as such. /r$ -- Zolera Systems, Securing web services (XML, SOAP, Signatures, Encryption) http://www.zolera.com ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]