be sent through the server - begin to see the RFC extract quoted above) and when that's the case, looking at the Issuer and perhaps the AKI industry to ascertain which Root CA issued this first intermediate CA https://ca-none.com/