I have a [root] certificate with private key stored on a smart card. I want to create another certificate signed with the root essentially becoming a ca. I found several ways to do something similar, however, all the examples have root certificate along with the private key stored locally in a *.pfx file or local key store. In my case the root certificate and the private key are on a smart card.
Is there a way to do it on Windows (I am on Windows 10 x64)? If there is no way to do it in Windows, is it possible to do it on Linux? I could not find a way to do it using makecert or similar tool, but maybe I just did not look hard enough.
Thank you in advance for any suggestions.