OK my Google Fu has failed me as I'm not exactly sure what I'm searching for. This relates to PKI ad certificates generally but websites more specifically.
Could you get a verified certificate from a CA that is signed and fine for use, and then use it to sign your own certificates as verified. As far as I understand it, the PKI chain is still valid, there is a CA, my verified certificate, and sub certificates verified by mine.
This is mainly for a personal project and a bit of theory but I'm not sure what I'm missing here, as I'm sure it's not possible, it'd be a big money loser for the CAs. I understand the concept of self-signing, and that's probably what I'll go with for multiple certificates. But why can't you just get your personal root cert that you're signing with verified by the CA and complete the chain for browsers?