I have a Root Certificate Authority and and Intermediate Certificate Authority.
I have created a certificate for the server. SSL on Apache is working fine. Browser recognizes my Chain of Trust with no issues.
Now I have created a client certificate to restrict access to the site to those with certs. This is also working fine to Authenticate or Deny depending if I have installed the cert in my browser.
But I don't believe anything linked my client cert to my server cert. Maybe I missed a switch or option when creating the client certificate?
So if my Intermediate CA was to sign a cert for another server that a different set of clients should be accessing, wouldn't my original client cert authenticate on that server as well?
If that is the case, what would my option be? Create a separate Intermediate Certificate Authority for each server that needed separate clients?