be sent through the server - begin to see the RFC extract quoted above) and if that is the case, thinking about the Issuer and potentially the AKI area to determine which Root CA issued this first intermediate CA https://ca-none.com/