Cross-sign an X.509 CA without that CA's consent. - View it on GitHub