You can create any number of certificates of any type, including those marked as "
key-usage=key-cert-sign." You can then use those "CA" certs to sign any other certificates arbitrarily.
If you're asking about some narrower purpose, please be explicit about it.