be sent by the server - see the RFC extract quoted over) and when that is the scenario, taking a look at the Issuer and perhaps the AKI area to ascertain which Root CA issued this first intermediate CA certificate. to https://ca-none.com/