Intermediate Certificate Authority

In public key infrastructure (PKI), an intermediate-layer certificate authority issued by a root CA that handles day-to-day certificate issuance. Leakage or misuse of its private key can enable attackers to issue trusted TLS certificates for arbitrary domains.