+1<br>
<br>
also in the same way,  sub intermediates for different classes of users. So:<br>
<br>
CA , service intermediate,  user class intermediate,  client cert<br>
<br>
PS some people will just use the same cert per user for all services<br>
<br>
alan<br>
-- <br>
Sent from my Android device with K-9 Mail. Please excuse my brevity.