We have our Windows 2003 server configured as a Certificate Authority for our intranet. The CA itself is certified as, say, mail.externaldomain.com.
We would like to generate further, intranet, certificates from this for individual web applications.
We do not want to self-sign, this is for pre-production testing and are looking to mirror the target deployment as closely as possible.
We have tried this and can't get the certificate to provide either Server or Web server identity. It only provides EFS support.
This means the web browser doesn't accept it.
How can we do this? We are using IIS6 on Windows 2003 Small Business Server.