Basically you cannot sign a certificate using another certificate.Certificates contain only public keys.Definition of Digital signature:
Digital Signature is private key encryption of hash of data
- A certificate is digitally signed by using the private key (and some other parameters depending on the standard that you are using) of the sender.
- A certificate is signed by VeriSign using their private key. And your browser validates the certificate using VeriSign's certificate (public key).
- If Eve wants to sign a certificate she would use her private key but the certificate will be treated as invalid by your browser as it does not have Eve's Digital certificate in the list of trusted CAs.