I wasn't sure how to search for this particular situation.
We have a new environment and it will be a while before we have any kind of issuing authority. But we do have a privately generated certificate that we have been using for everything to trust each other. It is not a publicly trusted cert, but full internal. For key usage, it was granted all purposes.
Our need is to generate certificates for SSL LDAP which must have the domain controller(s) in the subject line. Can I create this certificate using our existing certificate as the root authority certificate. The existing root certificate is in the trusted root certificates store on all our systems including DCs.
If so, can anyone point me to a procedure for doing this?
I know that this is not a good configuration as a full PKI infrastructure would be the wisest approach, but we are probably a year away from that.
Thanks