Sign personal certificate with digicert wildcard certificate
===

we have a wildcard certificate (*.ourcompany.com) purchased form digicert. I have been asked to set up a system wherein certain employee's have their own SSL Cert, to be used for signing PDF's, etc.

I have the impression that I can create these and sign them using our certificate, making them valid. however all my searching is finding me "code signing certificates" which is not at all what we are looking to do. I _believe_ we need to make a certificate signing request somehow, with the individuals details, then sign that request, however I am unsure exactly how to do so (especially given all the different files that make up the cert we were given).

Here's what I have received:

    |digicert/
    |-star_ourcompany_com.csr
    |-star_ourcompany_com.key
    |-certs/
    |--DigiCertCA2.crt
    |--star_ourcompany_com.crt
    |--TrustedRoot.crt

Can anyone shed any light on the best way to do this?