What type of digital certificate product do I need to begin a digital security infrastructure within my company and for use by our customers (pre-trusted by chaining)?
I believe I need some kind of root organizational cert that is signed by a public CA and provides me the ability to create a sign other certs within my organization for SSL and for code signing and for client certs and whatever else I might need. I expect chaining to work to validate for customers to the issued organizational cert and up to the public CA.
When I go to the major CAs I know about, I don't see any products availble that obviously fit my expectation.
I've generated self-signed certs a few times, and I've bought exact-domain SSL certs. But now I need a bigger plan.
I'm also aware of opinions/facts that the CA system is flawed so you don't have to spend much time on that in your answer.