Given that one CA can issue another a certificate so that they can go on and do the same, what would stop someone from using the certificate for their website to issue certificates and become an intermediate authority?
I assume there is a difference in the certificates issued to CAs and those issued by CAs: if I am wrong, what stops someone from abusing their web certificate to incorrectly issue other certificates?