be despatched through the server - see the RFC extract quoted above) and when that's the circumstance, thinking about the Issuer and most likely the AKI area to confirm which Root CA issued this first intermediate CA https://ca-none.com/