') //check if OneTrust is allowing "Personalized Experience Cookies" (i.e., Adobe Target) to load var adobeTargetOneTrustGroup = "PE"; function isAdobeTargetAllowed(adobeTargetOneTrustGroup) { var OptanonConsentCookie = document.cookie.match(/OptanonConsent=.*;/); return (OptanonConsentCookie && decodeURIComponent(OptanonConsentCookie[0]).includes(adobeTargetOneTrustGroup + ":1")); } if (isAdobeTargetAllowed(adobeTargetOneTrustGroup)) { //Adobe Target prehiding snippet ;(function(win, doc, style, timeout) { var STYLE_ID = 'at-body-style'; function getParent() { return doc.getElementsByTagName('head')[0]; } function addStyle(parent, id, def) { if (!parent) { return; } var style = doc.createElement('style'); style.id = id; style.innerHTML = def; parent.appendChild(style); } function removeStyle(parent, id) { if (!parent) { return; } var style = doc.getElementById(id); if (!style) { return; } parent.removeChild(style); } addStyle(getParent(), STYLE_ID, style); setTimeout(function() { removeStyle(getParent(), STYLE_ID); }, timeout); }(window, document, "body {opacity: 0 !important}", 3000)); }
hamburger icon
  • language
  • search
back icon Back
Choose your language
close icon
Content Type

Knowledge Base

How Certificate Chains Work

Solution ID : SO16297
Last Modified : 11/01/2023

Solution

What is a Certificate Chain?

  • A certificate chain is an ordered list of certificates, containing an SSL/TLS Certificate and Certificate Authority (CA) Certificates, that enables the receiver to verify that the sender and all CA's are trustworthy. 
  • The chain or path begins with the SSL/TLS certificate, and each certificate in the chain is signed by the entity identified by the next certificate in the chain.

What is an Intermediate Certificate?

  • Any certificate that sits between the SSL/TLS Certificate and the Root Certificate is called a chain or Intermediate Certificate. 
  • The Intermediate Certificate is the signer/issuer of the SSL/TLS Certificate. 
  • The Root CA Certificate is the signer/issuer of the Intermediate Certificate. 
  • If the Intermediate Certificate is not installed on the server (where the SSL/TLS certificate is installed) it may prevent some browsers, mobile devices, applications, etc. from trusting the SSL/TLS certificate. 
  • In order to make the SSL/TLS certificate compatible with all clients, it is necessary that the Intermediate Certificate be installed.

Manage every certificate in a single platform with DigiCert CertCentral.

SIGN UP

What is the Root CA Certificate?

The chain terminates with a Root CA Certificate. The Root CA Certificate is always signed by the CA itself. The signatures of all certificates in the chain must be verified up to the Root CA Certificate.

Illustration of a certification path from the certificate owner to the Root CA, where the chain of trust begins:

Did you find this page helpful?

Thank you for your feedback!

  • DigiCert Logo

    The most-trusted global provider of high-assurance TLS/SSL, PKI, IoT and signing solutions.