I didn’t make any reference to any visual/user benefits/trust from EV certs. If you’re going to do cross-signing, then you do need to essentially operate your

I didn’t make any reference to any visual/user benefits/trust from EV certs. If you’re going to do cross-signing, then you do need to essentially operate your own root program - assuming you want to keep your own root secure. You’ll also then presumably need to serve an additional cert (or two, if you’re keeping your own root offline) in the intermediate chain so it can be validated by the client.