[rompledorph]

I would like my public CA to sign me an intermediate certificate with my domain as named contraint. So I could use the built in trusted CAs