Hi again,
If the CAs are in domains that trust one another, it should work, but if they're in separate domains, you'll have to use certificates issued by a company like Verisign (i.e. people will have to have their own).
Patrick Halstead
Project Manager at Qdabra