What is a practice for issuing TSA (Time Stamping Authority) certificates?
I read that TSA certificates should be issued directly from Root CA, but basically TSA certificate is end entity certificate and Root CA should't be issuing certificates for end entities.
Should I issue TSA certificate from Root CA or should I issue dedicated Intermediate CA for issuing TSA certificate?