Let's say I have a certificate that is valid for example.com (and backed by a known SSL vendor). I want to be able to have a test version of the domain, test.example.com, that is also secured with an SSL certificate, but I'd like to do so without paying for a commercial certificate (I realize there are "free" certificates but nearly all of them come with time limitations, which doesn't work for me).
It's apparently possible to create a chained certificate off of that certificate. What I'm wondering is whether browsers will recognize that chained certificate as valid.
Note that the certificate for example.com is an SAN certificate and covers other domains like docs.example.com, example.org, etc.
Ideally I would like the chained certificate to also be an SAN certificate, and just provide test analogs of each domain: test.example.com, test.docs.example.com, test.example.org, etc.
I'm aware I'll need a separate IP address for the test certificate.
This is on Apache and CentOS, by the way.