nWhat’s
a valid parent certificate?
nIn
the raw X.509 model, parent-child relationships are determined solely by
matching Issuer DN in the child to Subject DN in the parent
nRecall
that there’s an assumption that you have a big directory handy to find certs.
nIf
you don’t have a directory handy, you need to do the matching yourself
nThis
is not as easy as you might think…