gistfile1.txt

################################################################################
# Which ICA signs a given cn?
#
# if you do not have an attribute "cn=Root" 
#     you sign yourself
#
# if you do not have an attribute "cn=Intermediate"
#     go to your parent,
#     find the ou=Certificate Authority at the same level
#     go down to the cn=Intermediate under it
#     that's what signs you.
#
# if you *do* have an attribute "cn=Intermediate"
#     if there is a cn=Root at the same level 
#         it signs you 
#        (this allows for people to go "out of bounds" and have their completely isolated pki)
#     else
#         go to your parent's *parent* 
#         find the ou=Certificate Authority at the same level
#         go down to the cn=Intermediate under it
#         that's what signs you.
#
################################################################################
+ ou=Certificate Authority
|     + cn=Intermediate
|     + cn=Root
|
+ o=Websages LLC
|    + ou=Certificate Authority
|    |      + cn=Intermediate
|    |             + crl
|    |             + pem
|    |
|    + ou=websages.com
|         + ou=Certificate Authority
|         |      + cn=Intermediate
|         |             + crl
|         |             + pem
|         |      + cn=Root (*optional, see algorithm above)
|         |             + crl
|         |             + pem
|         + ou=Hosts
|         + ou=People
|         + ou=Groups
|               + cn=Certificate Administrators
|
+ o=Kevin Barnes
|    + ou=Certificate Authority
|    |      + cn=Intermediate
|    |             + crl
|    |             + pem
|    |
|    + ou=vinbarnes.com
|         + ou=Certificate Authority
|         |      + cn=Intermediate
|         |             + crl
|         |             + pem
|         + ou=Hosts
|         + ou=People
|         + ou=Groups
|               + cn=Certificate Administrators
|
+ o=Rick Bradley
|    + ou=Certificate Authority
|    |      + cn=Intermediate
|    |      |      + crl
|    |      |      + pem
|    |      |
|    |      + cn=Root (*optional, see algorithm above)
|    |             + crl
|    |             + pem
|    |
|    + ou=rickbradley.com
|         + ou=Certificate Authority
|         |      + cn=Intermediate
|         |             + crl
|         |             + pem
|         + ou=Hosts
|         + ou=People
|         + ou=Groups
|               + cn=Certificate Administrators
|
+ o=James White
     + ou=Certificate Authority
     |      + cn=Intermediate
     |             + crl
     |             + pem
     |
     + ou=jameswhite.org
          + ou=Certificate Authority
          |      + cn=Intermediate
          |             + crl
          |             + pem
          + ou=Hosts
          + ou=People
          + ou=Groups
                + cn=Certificate Administrators