You can’t
An intermediate can issue certs for any domain so unless you are committed to being certified as being compliant to CA/B rules which will require a lot of expensive people and hardware, and can pay up big $$$ to an existing root CA to sign your intermediate, forget about it
Many “custom intermediates” are ones they manage fully for you, and only act as a whitelabeling service so the issuer is “Your Name” and not “EvilTrust Certificate Authority”
semisol
npub122…cgrkj
2026-01-30 03:17:05 UTC
in reply to nevent1q…xcqn
Author Public Key
npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkjPublished at
2026-01-30 03:17:05 UTCEvent JSON
{
"id": "e61280682e168c9877dcb44bfac413049329023851e9314da44fcfc9ca19b512",
"pubkey": "52b4a076bcbbbdc3a1aefa3735816cf74993b1b8db202b01c883c58be7fad8bd",
"created_at": 1769743025,
"kind": 1,
"tags": [
[
"e",
"23c005463925e57dd2a5dc6fce0b9eeffb2c3b6068a584466298011acd330cf8",
"",
"root"
],
[
"e",
"b441bfd1242224caba9e1e4cfa39929f9963f55927e5685158ded10ee5ce6a29",
"",
"reply"
],
[
"p",
"036533caa872376946d4e4fdea4c1a0441eda38ca2d9d9417bb36006cbaabf58"
]
],
"content": "You can’t\n\nAn intermediate can issue certs for any domain so unless you are committed to being certified as being compliant to CA/B rules which will require a lot of expensive people and hardware, and can pay up big $$$ to an existing root CA to sign your intermediate, forget about it\n\nMany “custom intermediates” are ones they manage fully for you, and only act as a whitelabeling service so the issuer is “Your Name” and not “EvilTrust Certificate Authority”",
"sig": "72122bc30869a2adcc7028f99d2d878875f6c28cd86304315cd6a9bc8cdfd7f2ddaa8871c03c12c65e319c3304fefc1ffdc0b7168c9b91882920618911c8a125"
}