how to request a certificate for a subordinate CA.

Hi

I set up an CA in 2008 server and was able to enroll certificate from XP
using the web based enrollment tool. Now I need to enroll a certificate for a
subordinate CA but don't know what should I fill in in the certificate usage
field if I use the advanced certificate enrollment form from XP. I tried to
use other with OID 2.5.29.19. The certificate I got doesn't have an Basic
contraints: CA:TRUE if I use openSSL tools to get the info for the
certificate. Could someone help me on this! Thanks a lot!

Tinghua