I have a root self-signed CA which I've created for myself. With this CA (we'll call it
country), I've created a server certificate and key for my webserver, nginx.
I now would like to create a second CA,
state which will be used as my
ssl_client_certificate CA in nginx. I'd like to keep
country separated for various reasons and not use my root CA
country for directly signing client certificates.
How can I generate a certificate authority
state which is signed by
country for authenticating client certificates in nginx?