Root, Intermediate, and Leaf: An Introduction to Certificate Chains
A common point of failure in infrastructure is the untrusted certificate error that seems to defy logic. These issues are rarely about a single certificate file. They are about a break in the Chain of Trust, the hierarchy that connects your server to a trusted authority. Learning to navigate this hierarchy is the single most effective way to solve the majority of infrastructure-level SSL and TLS failures. Anatomy of a Chain When you run openssl s_client -connect google.com:443 -showcerts, the first thing you see is the Depth List. This provides a map of the entire hierarchy. ...