Server based Internet CA and Third party internet certifier

The short question:Does anybody know it it is possible to “Import” a third party certifier to create a server based Internet CA in domino?

The long question:

I would like to obtain a company certificate from GlobalSign, verisign or similar (i.e. mycompany.com).

Then I would like to register a server based internet CA using the certificate/certifier I receive form verisign.

At last I would use my server based Internet CA to install internet certificates into my company’s person documents.

Finally, users logging trough notes will get their notes id upgraded with a internet certificate downloaded from the nab. They will then be capable of signing/encrypting…

The above would be perfect, but the only way I know to “migrate” an internet certifier is by importing a key ring. Does anybody know if Verisign and such provide keyrings? (For what I know they provide certificates)

Is the “Import keyring” only meant to be used to migrate “Old” R5 keyrings

Someone will tell “Well just register your own Internet CA”…

Well I would prefere to have all my user internet certificates being trusted by a very well known worldwide CA to avoid the need of sending our trusted root to other parties we intend to communicate with.

Thanks for any help