Can I get an Intermediate CA signed by the Root Authority?

Question

Digital certificates

You need a solution to issue your certificates inside the intranet. But so that these certificates are accepted by any external browser (that is, without adding your own certificate to the trusted ones).
If I have 5 domains a.example.com - e.example.com, then of course I can buy a wildcard certificate. But as far as I understand, it will be the same certificate on all servers, and this is not secure for me.
You can generate your own CA and sign specific certificates with them, but then you need to somehow deliver this CA to users in the key store, which again does not suit me.
So far I have only found https://www.globalsign.com/certificate-authority-r...- It seems to be what I need. But it is alarming that I found this from only one company, and this is far from Verisign.
Tell me, can anyone solve a similar problem?

Answer 1

Here everything seems to be told.
social.technet.microsoft.com/wiki/contents/article...

Answer 2

As it is not cheap to become a certification center, so I think this is not for you, buy cheap certificates for domains.