Yeah, basically a chain of trust certificates like outlined by X.509. I think managing the chain of trust would be a pretty involved process.