If I have 2 websites,
b.example.com. Those sites use TLS and SNI, and require client authentication with certificates created with my own CA.
The use case is that some clients have access to
*.example.com, other clients have access only to
Is it possible to create a certificate so that authentication is valid only when used on site
a.example.com, and rejected when trying to connect to
Or would I have to create a second CA for this purpose?
In this case, is it possible to have
a.example.com validate certificates against either one of those 2 CAs? (if yes the answer might be specific to nginx? or doable if one CA is a subordinate of the other?)